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Abstract 


The  dominance  of  the  United  States  (US)  military  means  that  traditional 
threats,  short  of  weapons  of  mass  destruction,  currently  pose  little  risk  to  US 
sovereignty.  Nontraditional  threats,  however,  pose  as5mimetric  dilemmas  for  the 
United  States.  The  increased  US  military  and  economic  reliance  on  information 
systems  introduces  new  vulnerabilities  not  adequately  protected  by  traditional 
kinetic  force  arms.  Additionally,  international  law  does  not  adequately  provide 
response  mechanisms  for  the  United  States  in  case  of  a  computer  network  at¬ 
tack.  The  United  States  needs  to  establish  policy  directives  and  diplomatic  ini¬ 
tiatives  to  secure  its  information  sovereignty  for  the  future. 

This  study  examines  the  history  of  technology  and  sovereignty,  which  reveals 
a  model  for  the  evolution  of  international  law.  Specifically,  the  history  of  sea,  air, 
and  space  provides  examples  on  past  issues  of  sovereignty.  A  three-stage  pat¬ 
tern  of  international  law  emerges.  Under  the  assumption  that  sovereignty  issues 
related  to  information  warfare  will  follow  the  same  path,  the  current  state  of  sov¬ 
ereignty  regarding  information  is  established.  To  focus  the  study,  a  functional 
outline  for  international  convention,  the  International  Regime  for  Information 
Security  (IRIS),  is  advanced.  IRIS  balances  US  domestic  privacy  needs  with  US 
national  security  demands.  Specifically,  technology  issues  regarding  digital 
identification  and  encryption  are  weighed  against  civil  liberties  and  intelligence 
needs. 

After  examining  the  advantages  and  disadvantages  of  the  IRIS  regime,  this 
study  recommends  its  use  as  a  model  for  a  future  international  convention  on 
information  warfare.  Within  an  IRIS-type  regime,  compromise  between  civil  lib¬ 
erty  advocates  and  intelligence  service  organizations  are  necessary.  Through 
digital  identification  and  universally  strong  encryption,  privacy  and  security 
concerns  will  be  satisfied. 
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Chapter  1 


Introduction 


One  very  important  reason  for  disliking  a  weapon  was,  of  course,  because  it  was 
new.  A  weapon  might  or  might  not  be  effective,  but  whenever  one  was  introduced 
it  always  threatened  to  upset  traditional  ideas  as  to  how  war  should  be  waged, 
and,  indeed,  what  it  was  dll  about. 

— Martin  L.  van  Creveld 
The  Transformation  of  War 

Revolutions  in  the  human  environment  have  frequently  eaused  radieal 
visions  of  the  future.  Giulio  Douhet  spun  the  advent  of  airpower  into  eat- 
aelysmie  battles  for  Command  of  the  Air;  nuelear  weapons  were  foreeast  to 
bring  an  end  to  war — or  the  world;  sputnik  was  a  harbinger  of  future  So¬ 
viet  domination;  aequired  immune  defieieney  syndrome  (AIDS)  or  the 
Ebola  virus  was  eertain  to  devastate  mankind  as  the  medieval  Blaek 
Death  had  deeimated  Europe.  In  the  United  States  (US),  the  revolution  of 
eomputer  network  teehnology  has  eneouraged  notions  of  eomputer  domi¬ 
nation  in  a  bloodless  eonfliet  or  an  apoealyptie  reekoning  with  the  year 
2000  (Y2K).  As  with  previous  revolutions,  the  aftermath  of  eomputer  as- 
eendanee  will  lie  somewhere  short  of  extreme  imagination. 

In  hindsight  the  hyperbole  aeeompanying  past  revolutions  aeted  as  an 
engine  for  poliey  debate.  Airpower  advoeates  elung  to  Douhet  in  their  eall 
for  a  separate  sendee  and  for  bomber -friendly  budgets.  The  eold  war 
started  with  a  petition  for  United  Nations  (UN)  eontrol  over  a  world  nu¬ 
elear  arsenal  and,  instead,  resulted  in  a  eostly  nuelear  arms  raee.  Spaee 
provided  a  peaeeful  outlet  for  eold  war  eompetition  in  a  raee  to  put  a  man 
on  the  moon.  If  there  is  a  eomputer  revolution,  it  is  imperative  that  poliey 
guidanee  be  based  upon  a  realistie  view  of  the  likely  outeome. 

Purpose  of  this  Study 

The  United  States  eurrently  enjoys  the  status  of  sole  world  superpower. 
With  benevolenee  being  in  the  eye  of  the  beholder,  it  is  possible  to  imag¬ 
ine  adversarial  threats  emerging.  The  dominanee  of  the  US  military  indi- 
eates  that  traditional  threats,  short  of  weapons  of  mass  destruetion 
(WMD),  pose  no  present  risk  to  US  sovereignty.  As  the  world’s  eeonomie 
leader,  the  United  States  is  ahead  in  the  transition  to  a  knowledge-based 
eeonomy.  The  United  States  has  leveraged  its  information  dominanee  to 
produee  a  robust  information  warfare  (IW)  eapability.  However,  the  new 
eeonomy  brings  with  it  new  vulnerabilities  that  may  not  be  adequately 
proteeted  by  eonventional  weapons  or  modern  information  arms.  With  the 
buy-in  eost  for  fW  eapability  extremely  low,  a  knowledgeable  eyberenemy 
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can  mass  an  attack  along  many  axes  simultaneously.  The  United  States 
needs  to  seeure  its  exposed  positions  through  proteetion,  deterrenee, 
and — if  neeessary — response.  Laeking  a  symmetrie  adversary,  a  propor¬ 
tionate  eyberresponse  may  be  unavailable. 

This  study  diseusses  how  the  use  of  eomputer  networks  threatens  the 
traditional  understanding  of  national  sovereignty.  It  attempts  to  deter¬ 
mine  whether  the  United  States  ean  deter  or  adequately  respond  to  eom¬ 
puter -based  threats  while  remaining  within  the  existing  international 
legal  regime.  The  eonelusion  rests  upon  the  foundation  of  international 
law  regarding  war  and  an  analysis  of  sovereignty  as  applied  in  the  realms 
of  sea,  air,  and  outer  spaee.  It  examines  how  far  advanees  in  teehnology 
have  outpaeed  the  intent  of  the  Charter  of  the  UN  regarding  aggression 
and  armed  foree.  After  proving  the  existenee  of  a  eomputer  revolution,  this 
study  examines  the  extremes  in  eurrent  rhetorie.  Finally,  this  study  pro¬ 
poses  reasonable  poliey  steps  neeessary  to  support  national  seeurity  in  an 
information  age.  It  determines  the  advantage  that  might  be  gained 
through  a  ehange  in  international  law  defining  where  information  opera¬ 
tions  (lO)  eross  from  peaeeful  aetion  to  aggressive  aetion  to  armed  foree. 
In  doing  so,  this  study  balanees  the  seeurity  that  eertainty  and  openness 
provide  against  the  flexibility  that  ambiguity  affords. 

War  and  Morality 

While  theologians  ean  point  to  referenees  in  the  Bible  that  illustrate 
morality  and  righteousness  in  war.  Saint  Thomas  Aquinas  was  the  first  to 
apply  the  Seholastie  method  in  a  study  of  virtue  in  war.  ^  In  his  theologi- 
eal  work,  Summa  Theologica  (1266-73),  he  explored  two  areas  of  war: 

Jus  ad  bellum — the  right  to  go  to  war  (eonfliet  management);  and 

Jus  in  bello — the  right  eonduet  during  war  (rules  of  hostilities). 

Subsequently,  his  work  beeame  the  model  for  The  Law  of  War  and  Peace, 
by  Hugo  Grotius  (1583-1645),  eonsidered  by  many  to  be  the  father  of  in¬ 
ternational  law.  2  While  the  use  of  information  attaek  during  war  is  im¬ 
portant,  elassifieation  requirements  will  limit  this  study  prineipally  to  the 
issue  of  Jus  ad  bellum. 

Laeking  a  divine  mandate  to  eonduet  war,  the  paradox  of  a  just  war  eon- 
struet  is  that  some  nation  must  break  the  rules  to  start  a  war.  Authors  in 
the  Middle  Ages  reeeived  eneouragement  from  the  Catholie  Chureh  to  de¬ 
fine  a  Jus  ad  bellum  (just  war) — to  deseribe  those  affairs  in  whieh  Chris¬ 
tians  eould  fight  with  elear  eonseienee.  Five  prineiples,  whieh  still  apply 
today,  emerged. 

•  War  must  be  waged  by  a  legitimate  authority. 

•  The  eause  must  be  just  reparation  for  injury  or  to  restore  what  had 
been  wrongly  seized. 

•  It  must  have  the  intention  of  advaneing  good  or  avoiding  evil. 
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•  There  must  be  a  reasonable  prospeet  of  vietory. 

•  Every  effort  must  be  made  to  reeoneile  differenees  by  peaeeful 
means.  ^ 

After  World  War  I,  “the  war  to  end  all  wars,”  efforts  were  made  to 
strengthen  international  law  to  prevent  war.  Speeifieally,  President 
Woodrow  Wilson’s  League  of  Nations  was  an  effort  at  eolleetive  seeurity — 
not  through  foree,  but  through  peaeeful  interdependenee.  Wilson  re¬ 
marked,  “If  any  Member  of  the  League  breaks  or  ignores  these  promises 
with  regard  to  arbitration  and  diseussions,  what  happens.  War?  No,  not 
War  but  something  more  tremendous  than  war.  Apply  this  eeonomie, 
peaeeful,  silent,  deadly  remedy  and  there  will  be  no  need  for  foree.  The 
boyeott  is  what  is  substituted  for  war.  A  nation  that  is  boyeotted  is  a  na¬ 
tion  that  is  in  sight  of  surrender.”'^  In  the  1920s  under  the  threat  of  League 
boyeott,  Yugoslavia  removed  troops  from  Albania;  and  Greeee  renouneed 
territorial  elaims  on  Bulgarian  territory.^  But  eonfidenee  in  state  “peer 
pressure”  aehieving  peaeeful  resolutions  ended  with  Italy’s  attaek  against 
Ethiopia  in  Oetober  1935.  Mindful  of  the  balanee  of  power  emerging  with 
a  resurgent  Nazi  Germany,  Britain  and  Franee  were  reluetant  to  exeoriate 
Faseist  Italy.  Britain  and  Franee  eliminated  oil  restrietions,  and  sanetions 
failed  to  eause  a  reversal.  When  Italy’s  intransigenee  beeame  apparent, 
the  League  revoked  the  sanetions  in  a  futile  effort  to  avoid  sending  Benito 
Mussolini  into  Adolf  Hitler’s  eamp.® 

Reeent  US  poliey,  sueh  as  the  Weinberger  Doetrine,  refleets  these  prin- 
eiples  to  internationally  legitimize  the  employment  of  armed  foree.  When 
possible  the  United  States  aehieves  legitimaey  through  approval  of  the 
UN.  As  the  League  of  Nations  before  it,  the  UN  attempts  to  prevent  eon- 
fliet  by  establishing  striet  requirements  for  just  war  in  a  eolleetive  re¬ 
sponse  while  eondemning  unjust  war. 

The  UN  on  Just  War 

The  Charter  of  the  UN  establishes  guidelines  for  the  legitimate  use  of 
armed  foree.  More  importantly,  it  mandates  peaeeful  resolution  of  dis¬ 
putes.  Artiele  2  spells  out  the  paeifie  nature  of  the  eharter  with  regards  to 
international  relations.  Based  on  the  prineiple  of  “sovereign  equality,”  the 
eharter  demands  peaeeful  settlement  of  disputes  while  proseribing  the 
threat  or  use  of  foree  against  another  member.^  Like  the  League  of  Nations 
before  it,  the  UN  ineludes  means  for  settling  differenees  of  opinion. 

Conflict  Resolution 

Chapter  VI,  “Paeifie  Settlement  of  Disputes,”  mandates  paeifie  methods 
to  settle  disputes.  Speeifieally,  it  orders  members  to  “first  of  all,  seek  a  so¬ 
lution  by  negotiation,  enquiry,  mediation,  eoneiliation,  arbitration,  judi- 
eial  settlement,  resort  to  regional  ageneies  or  arrangements,  or  other 
peaeeful  means  of  their  own  ehoiee.”®  Laeking  a  satisfaetory  resolution. 
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the  potential  belligerents  are  to  submit  to  the  Seeurity  Couneil’s  media- 
bon.  Chapter  VII,  “Aetion  with  Respeet  to  Threats  to  the  Peaee,  Breaehes 
of  the  Peaee,  and  Aets  of  Aggression,”  deseribes  the  Seeurity  Couneil’s  role 
in  eonfliet  arbitration.  Barring  a  resolution,  the  Seeurity  Couneil  ean  in¬ 
voke  measures  not  involving  the  use  of  armed  foree  to  eneourage  eompli- 
anee.  “These  may  inelude  eomplete  or  partial  interruption  of  eeonomie  re¬ 
lations  and  of  rail,  sea,  air,  postal,  telegraphie,  radio,  and  other  means  of 
eommunieation,  and  the  severanee  of  diplomatie  relations.”®  Ultimately, 
the  Seeurity  Couneil  may  eonsider  a  “bloekade,  and  other  operations  by 
air,  sea,  or  land  forees  of  Members  of  the  United  Nations.” 

Naturally,  member  states  are  reluetant  for  the  UN  to  label  them  as  ag¬ 
gressors.  However,  within  the  eontext  of  most  disputes  (as  with  ehildren), 
it  is  diffieult  to  determine  who  eommitted  the  first  offense.  Due  to  the 
prevalenee  of  the  term  aggression  in  the  UN  eharter,  the  General  Assem¬ 
bly  elarified  its  meaning  in  a  1974  resolution.  The  resolution  enumerates 
several  explieit  means  of  aggression  to  inelude  invasion  or  armed  attaek, 
bombardment,  bloekade,  the  use  of  forees  loeated  in  another  state,  and 
the  sending  of  armed  bands  or  mereenaries.^®  It  elarifies  those  aets  to  be 
avoided  in  fear  of  eolleetive  UN  response.  In  reeognizing  ehanges  in  the 
means  of  warfare,  the  resolution  qualifies  that,  “The  aets  enumerated 
above  are  not  exhaustive  and  the  Seeurity  Couneil  may  determine  that 
other  aets  eonstitute  aggression  under  the  provisions  of  the  Charter.  In 
matters  of  explieit  aggression,  a  vietim  state  is  not  required  to  turn  the 
other  eheek  while  the  Seeurity  Couneil  debates. 

Self-Defense 

During  negotiations  in  San  Franeiseo,  California,  in  1945,  the  United 
States  required  elarifieation  on  the  legitimaey  of  regional  eolleetive  seeurity 
arrangements.  Speeifieally,  US  adherenee  to  the  Monroe  Doetrine  and  the 
right  of  national  self-defense  required  an  aeknowledgment  of  supplementary 
seeurity  rights.  In  an  effort  to  quell  anxiety  about  the  timeliness  of  Seeurity 
Couneil  attention.  Chapter  VII  ineluded  a  loophole  for  responding  without  re¬ 
sorting  to  Seeurity  Couneil  adjudieation.  Artiele  51  allows. 

Nothing  in  the  present  Charter  shall  Impair  the  Inherent  right  of  individual  or 
collective  self-defence  if  an  armed  attack  occurs  against  a  Member  of  the  United 
Nations,  until  the  Security  Council  has  taken  measures  necessary  to  maintain 
international  peace  and  security.  Measures  taken  by  Members  in  the  exercise 
of  this  right  of  self-defence  shall  be  Immediately  reported  to  the  Security  Coun¬ 
cil  and  shall  not  in  any  way  affect  the  authority  and  responsibility  of  the  Secu¬ 
rity  Council  under  the  present  Charter  to  take  at  any  time  such  action  as  it 
deems  necessary  In  order  to  maintain  or  restore  international  peace  and  secu¬ 
rity. 

This  exception  stipulates  that  the  only  type  of  aggression  permitting  a 
nonbrokered  response  is  one  of  armed  attack.  Article  51  “left  ambiguous 
the  precise  boundary  between  enforcement  action  by  the  Security  Coun¬ 
cil  and  actions  that  might  permissibly  be  taken  in  self-defense.”^"^  In  mat- 
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ters  of  unarmed  conflict,  this  ambiguity  could  represent  a  veil  for  flexible 
response  or  a  gap  in  a  security  framework. 

During  a  dispute  the  Security  Council’s  ability  to  decide  what  consti¬ 
tutes  an  act  of  aggression  allows  for  a  collective  response  in  unforeseen 
circumstances.  If  a  state  can  afford  to  wait  for  Security  Council  judgment, 
this  is  an  appropriate  means  for  establishing  precedent.  Urgent  matters, 
however,  may  require  unilateral  action.  In  situations  not  involving  the  use 
of  classic  armed  force,  the  mandate  for  restraint  may  be  too  much  to  ask. 
For  this  reason  the  definitions  of  aggression  and  armed  attack  may  need 
to  be  revised  to  acknowledge  a  new  paradigm. 

An  Information  Revolution 

Several  advances  preceded  the  current  revolution  in  information  tech¬ 
nology.^^  In  the  mid- 1800s,  the  telegraph  and  railroad  heralded  a  revolu¬ 
tion  in  communication.  By  1866  telegraph  cables  linked  the  United  States 
and  Europe  while  networks  developed  on  both  continents.  In  1876  the 
telephone  increased  the  ability  to  communicate  by  an  order  of  magnitude 
and  left  telegraph  operators  with  new  jobs  at  switchboards.  The  advent  of 
wireless  radio  early  this  century  offered  new  opportunities  to  provide 
mass  communication.  In  the  middle  of  the  twentieth  century,  the  ad¬ 
vances  of  television  and  satellite  communication  greatly  increased  the 
amount  of  timely  information  communicated  through  a  single  medium. 
Each  of  these  technological  advances  led  to  social,  economic,  political, 
and  military  changes.^®  Daniel  S.  Papp,  David  S.  Alberts,  and  Alexander 
J.  Tuyahov  have  posited  that  the  Soviet  society,  which  attempted  to  limit 
free  communication,  could  not  adapt  to  emerging  information  technolo¬ 
gies  and  collapsed  in  its  competition  with  the  West.^^  Since  the  end  of  the 
cold  war,  communication  throughput  has  increased  by  yet  another  order 
of  magnitude. 

The  information  age  is  redefining  the  ways  to  measure  wealth  and  sta¬ 
tus.  Previously,  natural  resources  and  physical  labor  were  broad  meas¬ 
urements  of  the  wealth  of  a  business,  a  corporation,  or  a  state.  With  the 
globalization  of  markets  and  the  spread  of  information  technology  and 
computer  networks,  knowledge  and  communication  are  becoming  the 
modern  barometer  for  ascendancy  and  are  changing  the  face  of  the  work¬ 
force. 

During  the  Industrial  Revolution,  mechanization  displaced  the  vast 
agricultural  labor  pool.  These  workers  were  welcomed  into  the  new  urban 
regions  where  manufacturing  work  was  labor-intensive.  Presently,  while 
trade  protectionists  lament  the  loss  of  jobs  to  cheap  overseas  labor  mar¬ 
kets,  the  US  labor  pool  is  converting  to  a  service-  or  knowledge-based 
workforce.  International  Business  Machines  (IBM)  has  reduced  its  1985 
workforce  of  406,000  by  two-thirds.  Volkswagen  intends  to  reduce  its 
present  workforce  by  one-third.  Proctor  and  Gamble  has  rising  sales,  yet 


5 


is  dismissing  12  percent  of  its  workforce.^®  The  hyperinflation  in  the  price 
of  Internet  stocks  demonstrates  the  belief  that  the  marketplace  as  we 
know  it  is  in  the  midst  of  a  profound  revolution.  “Rent  in  cyberspace  is 
even  cheaper  than  catalogue  space,  and  much  lower  than  rent  at  the 
mall. ”2°  Where  2  percent  of  the  workforce  now  feeds  an  entire  nation,  how 
might  the  job  market  appear  when  2  percent  manufacture  all  goods,  and 
another  2  percent  arrange  for  the  marketing  and  delivery?  Future  society 
will  have  drastically  different  demographics  than  the  present.  Adminis¬ 
tration  based  upon  outdated  paradigms  will  poorly  serve  national  security 
interests.  What  type  of  dependencies  or  vulnerabilities  will  an  information 
age  herald? 


Overview  of  this  Study 

This  study  determines  if  the  existing  colloquium  of  international  law  ad¬ 
equately  addresses  the  needs  of  the  United  States  concerning  computer 
network  attack  (CNA).  Chapter  2  provides  a  historical  review  of  the  devel¬ 
opment  of  international  law  regarding  sovereignty  in  the  realms  of  sea,  air, 
and  outer  space.  Chapter  3  describes  the  expanding  importance,  and  at¬ 
tendant  vulnerabilities,  of  information  to  society.  Chapter  4  examines  how 
existing  international  law  concerning  national  sovereignty  applies  to  IW. 
Chapter  5  describes  a  possible  international  regime  protecting  national 
information  sovereignty.  Chapter  6  reviews  the  advantages  and  risks  of 
such  a  regime. 


Assumptions  and  Limitations 

This  study  will  remain  at  the  unclassified  level  and  use  open  sources  to 
determine  the  level  of  threat  and  protection  available  to  computer  net¬ 
works.  This  eases  handling  restrictions  while  providing  an  ersatz  approx¬ 
imation  of  a  study  performed  within  a  civil  organization.  This  is  important 
since  a  greater  share  of  lO  is  emerging  from  the  “black”  world  of  secret  pol¬ 
icy.  Therefore,  the  roles  and  budget  allocation  provided  for  lO  are  increas¬ 
ingly  determined  in  open  source  congressional  debate.  lO  consists  of  a 
broad  range  of  capabilities  including,  among  others,  psychological  opera¬ 
tions  (PSYOP),  information  security,  communications  security,  physical 
attack,  and  electronic  warfare.^^  This  study  narrows  its  focus  to  CNA.  CNA 
consists  of  “operations  to  disrupt,  deny,  degrade,  or  destroy  information 
resident  in  computers  and  computer  networks,  or  the  computers  and  net¬ 
works  themselves. This  study  will  not  delve  into  the  issue  of  IW  arms 
control  due  to  the  implausibility  of  verification.  Instead,  this  study  will  re¬ 
main  focused  on  the  issue  of  sovereignty  concerning  the  medium  of  infor¬ 
mation.  This  study  assumes  that  computer  forensics  will  improve  to  the 
point  where  the  source  of  attacks  can  be  verified. 
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Chapter  2 


International  Law 


At  the  rate  science  proceeds,  rockets  and  missiles  will  one  day  seem  like  buf¬ 
falo — slow,  endangered  grazers  in  the  black  pasture  of  outer  space. 

— Bernard  Cooper 
Gettysburg  Review 

The  features  of  the  media  of  sea,  air,  and  spaee  eombine  to  deseribe  the 
information  revolution.  The  sea  was  the  first  international  medium  that 
eould  harbor  a  threat  to  sovereignty.  As  an  international  medium — like 
the  sea  before  it — the  information  revolution  has  greatly  improved  inter¬ 
national  eommunieation  and  enhaneed  eommeree  and  interdependenee. 
Heavier -than-air  flight  raised  questions  of  sovereignty  to  a  multidimen¬ 
sional  level  for  the  first  time.  Like  Douhet,  present-day  information  devo¬ 
tees  elaim  that  information  dominanee  is  neeessary — and  adequate — for 
vietory.  Spaee  flight  raised  the  issue  of  earthly  limits  on  national  sover¬ 
eignty  while  heralding  a  realm  ostensibly  devoted  to  peaeeful  uses  for  the 
benefit  of  mankind.  Information  teehnology,  leveraging  spaee  assets  and 
mirroring  the  spaee  raee,  is  a  high-teehnology  field  and  a  souree  of  na¬ 
tional  pride  for  those  who  dominate. 

The  relationship  between  a  revolution  in  military  affairs  (RMA)  and  na¬ 
tional  sovereignty  is  grounded  in  international  law.  Changes  that  threaten 
national  sovereignty  preeede  adaptations  of  international  law.  An  under¬ 
standing  of  the  origins  of  international  law  and  an  examination  of  past 
revolutions  will  form  the  foundation  for  examining  the  present  RMA. 

Roman  Law 

International  law  existed  as  early  as  the  Roman  Empire.  In  addition  to 
eonventional  treaties  with  the  Jews,  Syrians,  and  Spartans,  the  Romans 
reeognized  a  form  of  unwritten  international  law.  ‘The  Romans  knew  of  a 
Jus  gentium,  a  law  of  nations,  whieh  Gains,  in  the  seeond  eentury,  saw  as  a 
law  ‘eommon  to  all  men,’  a  universal  law  that  eould  be  applied  by  Roman 
eourts  to  foreigners  when  the  speeifie  law  of  their  own  nation  was  unknown 
and  when  Roman  law  was  inapposite. The  Roman  Empire  intended  these 
laws  to  apply  to  foreign  eitizens.  Later,  in  the  seventeenth  eentury,  Duteh 
jurist  Grotius  posited  that  the  law  of  nations  applied  to  the  relationships  be¬ 
tween  states  as  well.  His  book.  The  Law  of  War  and  Peace,  aets  as  the  foun¬ 
dation  for  the  modern  diseipline  of  the  law  of  nations.  In  1789  English 
philosopher  Jeremy  Bentham  eoined  the  phrase  international  law  to  iden¬ 
tify  the  environment  Grotius  depleted.  ^  Unlike  munieipal  law,  international 
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law  maintains  no  independent  eoereive  means.  However,  international  law 
has  established  a  framework  that  permits  the  development  of  sovereign  re¬ 
lations  not  simply  based  on  “might  makes  right.” 

The  environment  that  eharaeterizes  international  law  ineludes  eonven- 
tional  law,  eustomary  law,  and  general  law.  Conventional  law  is  written 
explieitly — typieally  in  treaty  or  eonvention  format.  It  is  mutually  binding 
to  all  states  that  sign  and  ratify  a  paet.^  As  the  produet  of  voluntary  ne¬ 
gotiation  and  positive  aetion,  eonventional  law  is  more  binding  than  eus¬ 
tomary  law,  whieh  laeks  these  eharaeteristies.  Customary  law  emerges 
from  state  praetiee  where  aetions  “ereate  justifiable  expeetations  of  future 
observanee.”'^  A  third  souree  of  international  law  is  the  eommon  munieipal 
praetiee  of  sovereign  states.  In  eases  where  there  is  near  universal  opinion 
on  a  legal  issue  within  the  borders  of  states,  “it  may  be  presumed  that 
these  rules  are  so  fundamental  as  to  be  more  or  less  automatiealfy  a  part 
of  international  law.”®  Within  these  realms  of  international  law  lie  two  view¬ 
points  as  to  the  neeessity  of  state  aetion  (or  inaetion)  to  substantiate  law. 

As  polities  appears  divided  between  liberals  and  eonservatives,  so  law  is 
divided  between  positivists  and  naturalists.  Positivist  lawyers  generally 
insist  on  the  positive  eonsent  of  states  to  establish  understanding.  Natu¬ 
ralists  argue  eertain  rules  “are  bound  to  exist  regardless  of  state  eonsent 
and  that,  beyond  general  prineiples  of  law,  there  are  other  sorts  of  non- 
eonsensual  rules  of  international  law.”®  In  the  naturalist  exereise  of  inter¬ 
national  law,  however,  it  often  beeomes  neeessary  to  examine  the  eontex- 
tual  elements  prevailing  at  the  time  of  mandate.  Negotiating  eonventional 
law  beeomes  imperative  when  differenees  in  eultures  or  governments  tend 
to  distort  opinions  on  eustomary  law.  While  negotiation  adds  to  the  bulk 
of  existing  law,  it  tends  to  make  matters  less  equivoeal. 

International  legal  matters  that  pose  dilemmas  have  evolved  through 
stages  whieh  eonelude  with  written  agreements.  In  these  situations  inter¬ 
national  law  develops  aeeording  to  a  three-stage  pattern: 

1.  Debate  forms  on  a  subjeet  with  eonflieting  opinions. 

2.  Praetiee  of  states  begin  to  form  eustomary  law  (sometimes  disputed). 

3.  States  agree  to  treaty  or  eonvention.^ 

Afterwards,  if  time  renders  the  written  law  ineffeetive,  a  return  to  step  one 
restarts  the  proeess.  Sovereignty  has  been  a  frequent  souree  of  frietion  be¬ 
tween  states.  In  partieular,  revolutions  in  methods  of  transportation  have 
driven  examination  of  prior  eonventions  and,  ultimately,  the  development 
of  new  eonventional  law.  The  modern  examples  of  maritime,  air,  and  spaee 
law  provide  a  solid  foundation  for  examining  the  present  eireumstanees. 

Maritime  Law 

As  the  first  medium  to  eneounter  sovereignty  dilemmas  not  related  to 
territory,  maritime  law  aets  as  the  bedroek  for  other  transportation  medi¬ 
ums.  Maritime  law  started  developing  when  the  first  elaims  of  sovereignty 


10 


occurred  beyond  the  surf.  Primarily  for  the  maintenanee  of  land  sover¬ 
eignty,  states  attempted  to  plaee  a  buffer  zone  around  their  territorial  in¬ 
terests.  “Sueh  interests  ineluded  the  prevention  of  poaehing  on  loeal  fish¬ 
ing  grounds,  prevention  of  smuggling,  eontrol  of  negligent  navigation  in 
eoastal  waters,  and  the  prevention  of  other  ineidents  whieh  endangered 
the  inhabitants  of  the  state  eoneerned.”®  Even  after  eenturies  of  praetiee, 
maritime  sovereignty  was  still  a  souree  of  dispute  in  the  mid- 1940s.  Tra¬ 
ditionally,  states  had  observed  a  three-mile  limit  to  their  elaims  of  mar¬ 
itime  sovereignty,  whieh  represented  the  approximate  range  of  eannon 
shot  when  first  praetieed.  Until  teehnology  permitted  greater  exploitation 
of  offshore  natural  resourees,  this  eustom  was  adequate. 

Stage  One — Debate 

States  eventually  ehallenged  the  eustomary  three-mile  limit  as  they 
sought  to  eontrol  the  natural  resourees  beneath  the  surfaee.®  The  United 
States  aggravated  maritime  peaee  in  1945  by  elaiming  the  natural  re¬ 
sourees  on — and  fishing  areas  above — its  eontinental  shelf.  This  eaused 
reeiproeal  aetion  by  other  nations  that  did  not  benefit  from  sueh  an  exten¬ 
sive  eontinental  shelf.  Instead,  these  states  made  eaprieious  elaims  (some  ex- 
eeeding  200  miles)  to  the  extent  they  were  able  to  exploit.^®  Mueh  of  the  US 
position  was  framed  to  permit  the  free  eeonomie  exploitation  of  the  seabeds, 
whieh  would  reward  previous  investment  by  US  eorporations. 

Stage  Two — Customary  Law 

To  support  US  poliey,  the  Navy  established  an  exereise-of-rights  pro¬ 
gram  to  eontest  what  the  United  States  eonsidered  illieit  elaims.  The 
Navy  would  intentionally  sail  ships  within  elaims  other  states  had  made, 
whieh  exeeeded  the  stated  US  position.  A  vigorous  example  of  attempting 
to  develop  eustomary  law,  this  program  remains  an  important  part  of  the 
Navy’s  role,  highlighted  reeently  by  elashes  in  the  Gulf  of  Sidra  to  oppose 
Libyan  sovereignty  assertions. 

In  the  meantime,  like  the  land  rush  days  of  the  US  western  expansion, 
states  elaimed  and  held  what  oeean  they  reasonably  eould.  Other  states 
found  it  in  their  interest  to  reeognize  only  the  three-mile  limit  so  that  their 
ships  eould  harvest  from  the  riehest  fishing  areas  while  ignoring  sover¬ 
eignty  elaims.  Unable  to  establish  zones  of  fishing  eonservation,  eountries 
elashed  over  rights  to  eolleet  fish  from  the  sea  and  depleted  areas  onee  be¬ 
lieved  everlasting.  Oddly,  the  disputes  over  eustomary  law  eaused  states 
to  aet  against  their  long-term  interest.  To  prevent  elashes  of  military 
forees  and  realize  the  benefits  of  maritime  peaee,  it  beeame  neeessary  to 
reaeh  an  aeeord  all  states  eould  live  by.^^ 

Stage  Three — Conventional  Law 

The  UN  International  Law  Commission  started  work  in  1949  on  the  UN 
Convention  on  the  Law  of  the  Sea.  The  United  States  agreed  with  the  major- 
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ity  of  it  but  refused  to  sign  it  due  to  the  proposed  eolleetive  administration  of 
seabed  natural  resourees.  Other  states  saw  the  new  “12-mile  limit  to  the  ter¬ 
ritorial  sea  and  the  various  transit  rights  guaranteed  in  the  Convention  [as] 
negotiated  trade-offs  for  the  Convention’s  deep  seabed  mining  provisions. 
Ultimately,  the  US  administration  reeeived  eoneessions  on  seabed  mining 
and  approved  it  in  1998,  pending  Senate  ratiiieation. 

Air  Law 

In  eontrast  to  maritime  law,  eonventlonal  law  of  the  air  developed  more 
rapidly  (perhaps  due  to  fewer  natural  resouree  eonfliets).  Before  heavier - 
than-alr  flight,  maritime  analogies  were  used  to  deseribe  the  air.  As  far  baek 
as  450  B.C.,  Roman  legal  opinion  stated,  “The  air  should  be  open  to  the  free 
use  of  all,  and  that  it  might  be  used  freely  as  might  the  flowing  water,  the  sea 
shores,  and  the  sea.”^'^Mueh  later,  in  1889,  German  balloons  landing  within 
Freneh  territory  eaused  the  question  of  air  sovereignly  to  arise.  As  relative 
masters  of  flight,  the  Freneh  were  poised  to  benefit  from  a  liberal  regard  for 
air  sovereignty.  The  Freneh  “held  that  sinee  the  air  was  not  suseeptible  to  a 
regular  oeeupation  in  its  entirety,  there  eould  be  no  ownership  of  the  alr.”^® 
In  opposition,  the  English  held  that  it  was  not  a  question  of  owning  the  phys- 
ieal  air  but  one  of  defining  the  airspaee.  Controlled  flight  would  provide  more 
ineentive  for  eonvention  (fig.  1). 


Source:  First  Flight  Centennial  Foundation  home  page,  n.d.,  n.p.;  on-line,  Internet,  available  from  http://www.first- 
flightcentennial.org/foundation.htm. 

Figure  1. 1903  Wright  Fiyer  Sketch 
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The  advent  of  dirigibles  and  airplanes  and  their  elear  military  potential 
led  to  international  eustom  on  air  sovereignty.  The  International  Air  Nav¬ 
igation  Conferenee,  held  in  Paris  in  1910,  provided  early  guidanee  for 
state  sovereignty  in  the  air.  Although  nonbinding,  it  formalized  eustomary 
law  through  general  agreement  that  “eaeh  state  had  full  sovereignty  in  the 
usable  spaee  over  its  national  lands  and  waters,  that  no  general  right  of 
international  transit  existed  for  aireraft  of  other  states  in  the  absenee  of 
international  law,  and  that  the  only  praetieal  legal  method  of  regulating 
international  flight  was  by  agreement  whieh  would  provide  for  the  grant 
of  privileges  of  flight  through  sueh  national  airspaee.”^®  Conduet  during 
World  War  I  solidified  the  praetiee  of  defending  sovereign  airspaee.  Nations 
intereepted  and  shot  down  enemy  aireraft.  Neutral  states  pursued  and 
foreed  down  belligerent  aireraft  and  interned  their  erews.  “National  air¬ 
spaee  eame  to  be  eonsidered  as  saerosanet  as  sovereignty  itself  and  was 
no  less  jealously  guarded. 

After  World  War  I,  eonventional  law  developed  to  distinguish  air  sover¬ 
eignty.  The  Paris  Convention  of  1919  reeognized  exelusive  state  sover¬ 
eignty  over  the  airspaee  above  a  nation’s  territory  to  inelude  the  mother 
eountry,  all  eolonies,  and  adjaeent  territorial  waters.^®  The  United  States 
ehose  to  reserve  its  opinion  on  the  issue  of  air  sovereignty,  deelining  to 
sign  the  Paris  Convention.  It  seemed  that  the  United  States  would  be  in  a 
better  position  to  negotiate  later.  Indeed,  the  United  States  did  ratify  the 
Warsaw  Convention  of  1929  and  the  Chieago  Convention  of  1944.  These 
eonventions  eonfirmed  state  air  sovereignty  and  established  rules  for 
safety  of  flight.  At  the  time,  although  spaee  flight  was  not  yet  attainable, 
debate  over  spaee  sovereignty  developed. 

Space  Law 

The  early  question  of  law  regarding  spaee  dealt  with  the  dividing  line  be¬ 
tween  sovereign  air  and  not-so-sovereign  outer  spaee.  In  time,  this  fol¬ 
lowed  the  three-phase  model  for  evolving  international  law  deseribed 
above.  While  spaeeeraft  were  still  mere  visions  of  seienee  fietion  writers, 
early  twentieth- eentury  authorities  already  began  to  question  whether 
eonventions  of  law  in  the  air  would  apply  in  limitless  spaee.  Spaee  rheto- 
rie  heated  up  after  World  War  II  when  the  United  States  and  the  Soviet 
Union  squared  off  in  a  eold  war  eompetition  for  ideologieal  dominanee. 

Stage  One — Debate 

Early  in  the  deliberation  on  spaee  law,  the  idea  of  limitless  sovereignty 
projeeted  from  terrestrial  land  boundaries  broke  down.  A  satellite  “pays 
little  respeet  to  sovereign  state  boundaries,  as  its  orbit  in  spaee  remains 
independent  of  the  earth’s  rotation  and  it  thereby  establishes  a  new  traek 
for  eaeh  revolution  in  orbit. Limitless  extension  of  air  sovereignty  would 
nearly  prohibit  the  development  of  satellites.  Advoeates  maintained  “an 
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individual  earth  state  would  not  likely  eonsider  an  objeet  orbiting  about 
the  moon  as  an  eneroaehment  upon  its  partieular  territorial  sovereignty 
or  national  airspaee.”^®  The  idea  of  sovereignty  reaehing  out  to  infinity  and 
transferring  ownership  of  extraterrestrial  bodies  based  upon  the  rotation 
of  the  earth  was  absurd.  However,  any  nation  would  find  overflight  of  its 
territory  by  foreign  bombers  at  50,000  feet  unaeeeptable.  In  September 
1952  the  Third  International  Astronomieal  Congress  met  in  Stuttgart, 
West  Germany,  and  eoneluded. 

The  factors  which  tend  to  make  the  close  relationship  between  the  earth  and 
the  airspace  above  it  appear  to  be  natural  law,  do  not  apply  to  nonatmospherlc 
outer  space,  for  only  the  area  filled  with  air  stands  in  such  an  essential  rela¬ 
tionship  with  life  on  the  surface  of  the  earth,  that  It  must  be  designated  as  be¬ 
longing  to  the  earth.  Contrariwise,  this  “special  and  sovereign  correlation”  does 
not  exist  between  outer  space  and  the  land  and  water  areas  under  It.  Outer 
space  cannot  be  considered  as  an  “Integral  constituent  part”  of  the  territory  of 
a  state. 

The  question  then  beeame  one  of  dividing  lines — ^where  does  air  end  and 
spaee  start? 

The  dividing  line  between  air  and  spaee  was  the  subjeet  of  profound  de¬ 
bate.  In  1945  Hans  Kelsen  asserted  that  for  the  “effieaey  of  the  national 
legal  order,”  eaeh  state’s  territorial  dimensions  should  be  defined. He 
proposed  using  a  method  that  would  limit  sovereign  air  boundaries  to 
those  within  whieh  a  state  eould  establish  effeetive  eontrol.  This  method 
would  ereate  a  dynamie  frontier  that  would  ehange  as  teehnology  devel¬ 
oped.  In  1951  John  C.  Cooper,  former  direetor  of  the  Institute  of  Air  Law 
at  MeGill  University,  tended  to  agree  with  “effeetive  eontrol”  as  a  meeha- 
nism.  He  eoneluded,  “the  only  rational  approaeh  was  that  the  limit 
elaimed  by  the  most  advaneed  state  should  be  enjoyed  by  all  states,  re¬ 
gardless  of  their  strength. By  1956  he  had  given  up  this  eoneept  due  to 
the  diffieulties  in  applieation.  Instead,  he  substituted  a  “trizonal  eoneept” 
whieh  would  “reeognize  a  ‘territorial  spaee’  upward  to  the  eeiling  at  whieh 
aireraft  may  be  operated;  a  seeond  zone  up  to  300  miles  ealled  ‘eontigu- 
ous  spaee,’  with  eertain  rights  for  the  nations  of  the  world;  and  a  final  area 
above  eontiguous  spaee  ealled  ‘free  spaee. By  1958  experts  reeognized 
the  diffieulties  regarding  inspeetion  regimes  and  orbital  transitions  be¬ 
tween  zones,  as  well  as  dissension  about  the  intermediate  distanee  be¬ 
tween  eontiguous  and  free  spaee.  Instead,  a  simpler  “bizonal  eoneept” 
emerged  to  separate  air  from  spaee. 

Several  physieal  eharaeteristies  aeted  as  eandidates  for  the  air/ spaee 
dividing  line.  The  views  ranged  “from  as  low  as  30  miles  to  the  suggestion 
that,  if  the  term  ‘atmosphere’  is  used,  it  might  extend  upward  as  high  as 
60,000  miles. More  eommonly,  a  proposed  53-mile  limit  existed  as  the 
height  where  aerodynamie  lift  is  gone  but  sustained  orbit  eould  be  main¬ 
tained.  This  beeame  known  as  the  “Karman  53 -mile  line”  after  the  author 
of  the  study  that  proposed  it.  Ultimately,  seholastie  deliberation  estab¬ 
lished  a  baseline  for  demareation  whieh  praetiee  would  have  to  reinforee. 
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stage  2 — Customary  Law  Develops 

The  1957  International  Geophysieal  Year  (I GY]  was  an  opportunity  for 
the  United  States  and  the  USSR  to  eloak  their  national  spaee  efforts  with 
the  peaeeful  development  of  seienee.  While  not  tied  to  internationally 
sanetioned  IGY  events,  both  nations  stated  their  proposed  satellite 
launehes  would  be  within  the  auspiees  of  peaeeful  seientifie  researeh.  Of- 
fieials  in  President  Dwight  D.  Eisenhower’s  administration  seeretly  hoped 
the  Soviets  would  launeh  first  and  establish  a  freedom  in  spaee  that  they 
eould  not  revoke. The  Soviets  obliged  by  launehing  Sputnik  /  on  4  Oeto- 
ber  1957.  Establishment  of  eustomary  law  required  an  explieit  aetion, 
subsequently  unopposed.  Both  nations  had  proelaimed  their  intentions  to 
launeh  earth-orbiting  satellites  but  did  not  request  diplomatie  elearanees 
to  overfly  the  sovereign  airspaee  of  other  states. The  faet  that  no  nation 
protested  the  satellites  would  satisfy  the  naturalists.  In  this  ease  the  si- 
lenee  of  other  nations  was  eonsent.  Positivist  advoeates  illustrated  how 
fervently  states  opposed  other  aets  of  airspaee  violations.  “At  the  same 
time  that  satellites  are  eireling  the  earth  in  indiseriminate  orbits  as  far  as 
surfaee  territory  is  eoneerned,  a  dozen  or  more  eomplaints,  protests,  and 
international  ineidents  have  arisen  from  elaims  of  violations  of  national 
airspaee. The  presenee  of  objeetion  in  one  regime  (air)  and  the  absenee 
of  objeetion  in  another  (spaee)  established  positively  that  there  was  a  dif- 
ferenee.  Strangely,  in  the  next  40  years  eonventional  law  has  not  eom- 
pleted  the  issue  by  an  explieit  agreement  on  an  air/spaee  dividing  line.  In¬ 
stead,  states  have  seen  a  more  important  issue  in  the  purpose  of 
man-made  spaee  objeets. 

Stage  3 — Conventional  Law 

In  an  attempt  to  maintain  the  existing  balanee  of  power,  in  the  1960s 
the  United  States  endorsed  a  regime  that  would  not  permit  a  destabilizing 
use  of  spaee.  With  remarkable  advanees  in  nuelear  weapons  mated  with 
missiles,  WMD  on  orbit  might  be  a  logieal  next  step.  ‘This  system  of  at- 
taek  by  ‘airborne’  ICBM  poses  a  mueh  greater  threat  than  that  of  a  free- 
falling  missile  initiated  from  the  surfaee. ’’^°  In  an  effort  to  prevent  prolif¬ 
eration  of  this  eapability,  the  United  States  proposed  to  ban  the  plaeement 
of  WMD  in  orbit  and  ultimately  sueeeeded  with  the  Outer  Spaee  Treaty  of 
1967.^1  Additionally,  the  treaty  banned  the  plaeement  of  WMD  or  military 
installations  on  any  eelestial  body.  It  also  required  states  to  render  all 
possible  assistanee  to  foreign  astronauts  in  distress  and  provided  for  in- 
speetion  of  extraterrestrial  installations.  However,  it  did  not  address  the 
issue  of  eonventional  weapons  in  orbit. 

Status  Quo — ^Waiting  for  the  Shoe  to  Drop 

As  positivists  would  argue  about  international  law,  an  aet  not  explieitfy 
banned  is  permitted.  In  this  sense  what  is  absent  from  the  Outer  Spaee 
Treaty  and  other  agreements  says  a  great  deal.  Aeeording  to  a  US  Army 
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instructional  text  on  space:  “International  law  implicitly  permits  such  tra¬ 
ditional  military  support  functions  such  as  surveillance,  reconnaissance, 
navigation,  meteorology,  and  communications  [in  space].  It  permits  the 
deployment  of  military  space  stations;  the  testing  and  deployment  in  earth 
orbit  of  non-nuclear,  non-ABM  weapon  systems;  the  use  of  space  for  in¬ 
dividual  and  collective  self-defense;  and  any  conceivable  activity  not 
specifically  prohibited  or  otherwise  constrained. 

The  weaponization  of  space  is  currently  a  question  of  policy,  not  law.^^ 
Some  might  argue  the  pacification  of  space  is  implicit  in  all  treaties  re¬ 
garding  space,  and  the  lack  of  weapons  in  space  has  created  a  customary 
regime  that  forbids  them.  However,  the  absence  of  any  effort  to  place 
weapons  in  space  has  denied  states  the  opportunity  to  oppose  them. 

The  Models 

International  law  has  codified  limits  for  the  sovereign  dimensions  of 
land,  sea,  and  air.  The  unique  nature  of  space  leads  to  issues  not  seen 
among  terrestrial  mediums.  Generally,  nations  cannot  object  to  the  mili¬ 
tary  presence  of  land,  sea,  or  air  forces  outside  their  sovereignty.  Absent 
a  definitive  limit  between  air  and  space,  conventional  law  has  sought  to 
limit  space  by  purpose  or  intent.  Since  space  overlays  other  environments, 
even  those  nations  unable  to  launch  satellites  hold  it  in  high  regard.  This 
respect,  combined  with  the  deliberate  nature  of  employing  in  space,  per¬ 
mits  great  detail  and  care  in  the  evolution  of  space  law.  Conventional  law 
awaits  customary  judgment  as  to  whether  outer  space  is  an  international 
free  regime,  akin  to  the  high  seas  and  international  airspace,  or  one  re¬ 
stricted  to  benevolent  use.  Like  space,  information  is  a  pervasive  medium. 
However,  rapid  development  of  computer  technology  and  inexpensive  op¬ 
erating  costs  may  cause  technology  to  transcend  legal  precedents. 
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Chapter  3 


Information  Reliance 


Information  is  the  oxygen  of  the  modern  age.  It  seeps  through  the  walls  topped 
by  barbed  wire,  it  wafts  across  the  electrified  borders. 

— Ronald  W.  Reagan 
Guardian 

To  alter  international  law,  large  eonstitueneies  must  be  eonvineed  that  a 
future  with  ehange  is  better  than  the  status  quo.  Any  additional  law  or  reg¬ 
ulation  is  an  agreement  to  trade  freedom  of  eonduet  for  regulation.  The  ben¬ 
efits  of  regulation  may  inelude  seeurity,  predietability  (whieh  ean  lead  to  ef- 
lieieney),  and  impartiality.  The  eosts  typieally  assoeiated  with  exeessive 
legislation  inelude  ineffieieney,  eosts  of  implementation,  and  limits  on  liberty 
due  to  boundaries.  Before  eonsidering  a  law  that  governs  the  use  of  infor¬ 
mation,  it  is  imperative  to  determine  the  importanee  of  information. 

The  signifieanee  of  a  national  information  poliey  refleets  information’s 
importanee  to  soeiety  and  national  defense.  Ameriean  soeiety  has 
markedly  inereased  its  relianee  on  eomputer  teehnology.  The  ongoing 
RMA  is  the  result  of  teehnology  advanees  tied  to  doetrine  and  organization 
ehanges.  In  response,  the  National  Security  Strategy  of  the  United  States 
(NSS)  and  the  National  Military  Strategy  of  the  United  States  of  America 
(NMS)  have  identified  teehnology  reliant  infrastruetures  as  being  vital  to 
US  interests.  This  ehapter  examines  the  importanee  of  both  information 
and  infrastrueture  as  their  seeurity  and  effieaey  are  interdependent. 

Information  as  a  Vital  US  National  Interest 

The  1998  iVSS  ineorporated  ehanges  that  elevate  the  importanee  of  in¬ 
formation  to  US  seeurity.  In  eonfronting  emerging  seeurity  vulnerabilities, 
the  iVSS  departed  from  the  pattern  of  posting  ordinary  ehanges  to  a  no¬ 
table  update  ineorporating  highlights  from  the  President’s  Commission  on 
Critieal  Infrastrueture  Proteetion  (PCCIP). 

Eaeh  iVSS  from  1997  and  1998  has  themes  that  aet  as  the  foundation 
for  national  poliey.  Speeifieally,  in  the  prefaee  eaeh  delineates  three  eore 
objeetives:  to  enhanee  US  seeurity,  to  bolster  Ameriea’s  eeonomie  pros¬ 
perity,  and  to  promote  demoeraey  abroad.^  The  1997  iVSS  alludes  to  na¬ 
tional  interests  throughout  the  doeument.  However,  it  does  not  define  na¬ 
tional  interests  nor  give  explieit  examples  of  them.  Instead,  the  1997  iVSS 
provides  six  strategie  priorities  that  President  William  J.  Clinton  laid  out 
in  his  1997  State  of  the  Union  Address: 

•  foster  an  undivided,  demoeratie,  and  peaeeful  Europe; 
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•  forge  a  strong  and  stable  Asia  Paeifie  eommunity; 

•  eontinue  Ameriea’s  leadership  as  the  world’s  most  important  foree 
for  peaee; 

•  ereate  more  jobs  and  opportunities  for  Amerieans  through  a  more 
open  and  eompetitive  trading  system  that  also  benefits  others 
around  the  world; 

•  inerease  eooperation  in  eonfronting  new  seeurity  threats  that  defy 
borders  and  unilateral  solutions;  and 

•  strengthen  the  military  and  diplomatie  tools  neeessary  to  meet  these 
ehallenges.2 

Within  the  1997  iVSS,  information  is  treated  as  an  enabler  and  not  as  a 
national  interest  in  its  own  right.  “The  national  seeurity  posture  of  the 
United  States  is  inereasingfy  dependent  on  our  information  infrastrue- 
tures.”^  While  the  1997  iVSS  grants  that  the  interdependenee  within  the 
infrastrueture  makes  it  vulnerable,  it  alludes  to  eoneepts  and  teehnologies 
under  development  for  its  proteetion.  It  further  states  that  the  new  meas¬ 
ures  must  be  fully  implemented  to  ensure  future  seeurity  of  “not  only  our 
national  information  infrastruetures,  but  our  nation  as  well.”'’^  (fig.  2) 
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Source;  President’s  Commission  on  Critical  Infrastructure  Protection,  Critical  Foundations:  Protecting  America's 
Infrastructures,  October  1 997. 

Figure  2.  Threats,  Risks,  and  Motivations 
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In  contrast  the  1998  iVSS  makes  the  strategie  foundation  of  national 
infrastruetures  more  explieit.  It  plaees  eritieal  infrastruetures  at  the 
forefront  of  national  interests,  while  explieitly  defining  what  national 
interests  are.  In  the  prefaee  the  1998  iVSS  states,  “Proteeting  our  eiti- 
zens  and  eritieal  infrastruetures  at  home  is  an  essential  element  of  our 
strategy.”®  At  first  glanee  it  seems  to  parallel  past  ealls  for  proteeting 
US  eitizens  within  its  territory.  However,  assoeiating  eitizen  proteetion 
with  infrastrueture  seeurity  is  a  big  step  towards  justifying  a  federal  re¬ 
sponsibility  for  that  seeurity.  The  1998  iVSS  adds  that  “potential  adver¬ 
saries — ^whether  nations,  terrorist  groups  or  eriminal  organizations — 
will  be  tempted  to  disrupt  our  eritieal  infrastruetures,  impede 
government  operations,  use  weapons  of  mass  destruetion  against  eivil- 
ians,  and  prey  on  our  eitizens  overseas.”®  Equating  attaeks  on  eritieal 
infrastruetures  with  types  of  physieal  aggression  seems  a  drastie 
ehange  in  the  poliey  strueture. 

In  another  varianee  the  1998  iVSS  aetually  provides  the  administration’s 
definition  of  national  interests.  It  deseribes  three  eategories  of  interests, 
the  first  of  whieh  are  vital.  Vital  interests  are  “those  of  broad,  overriding 
importanee  to  the  survival,  safety  and  vitality  of  our  nation.  Among  these 
are  the  physieal  seeurity  of  our  territory  and  that  of  our  allies,  the  safety 
of  our  eitizens,  our  eeonomie  well-being  and  the  proteetion  of  our  eritieal 
infrastruetures.  We  will  do  what  we  must  to  defend  these  interests,  in¬ 
eluding — ^when  neeessary — using  our  military  might  unilaterally  and  deei- 
sively.”"^  The  iVSS  also  identifies  the  eategories  of  “important  national  in¬ 
terests”  (sueh  as  halting  the  flow  of  refugees  from  Haiti  and  US 
involvement  in  the  North  Atlantie  Treaty  Organization  operations  in 
Bosnia),  and  “humanitarian  or  other  interests”  (responding  to  natural  or 
man-made  disasters,  ete.).  Conspieuous  is  the  relative  importanee  infra¬ 
strueture  has  taken  (fig.  3).  As  a  vital  interest,  it  apparently  earries  greater 
importanee  than  the  Bosnia  or  Haiti  operations  and  signifieantly  more 
than  a  “mere”  disaster.  Later  in  the  doeument,  under  “Emerging  Threats 
at  Home,”  “Proteeting  Critieal  Infrastruetures”  is  seeond  only  to  “Manag¬ 
ing  the  Consequenees  of  WMD  Ineidents.”®  The  1998  iVSS  then  translates 
its  vital  interest  into  eonerete  aetion. 

The  new  National  Infrastrueture  Proteetion  Center  (NIPC)  is  the  desig¬ 
nated  federal  ageney  in  eharge  of  eoordinating  infrastrueture  seeurity.  The 
1998  iVSS  refers  to  “Presidential  Deeision  Direetive  63,”  signed  in  May 
1998,  whieh  “makes  it  U.S.  poliey  to  take  all  neeessary  measures  to  swiftly 
eliminate  any  signifieant  vulnerability  to  physieal  or  information  attaeks 
on  our  eritieal  infrastruetures,  espeeially  our  information  systems.”®  Con¬ 
sequently,  the  NIPC  will  beeome  the  foeal  point  for  gathering  information 
on  threats  to  the  infrastruetures.^®  The  NIPC  will  identify  and  assess 
threats,  provide  warnings,  and  eonduet  ineident  response  and  investiga¬ 
tions.  However,  the  NIPC’s  laek  of  international  authority  will  neeessitate 
deterrenee  of  external  threats  by  other  means. 
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Figure  3.  Vital  Infrastructures 


The  1998  iVSS  describes  the  interdependence  and  internationalization 
wrought  by  the  information  age.  It  states,  “Globalization  is  bringing  citi¬ 
zens  from  all  continents  closer  together,  allowing  them  to  share  ideas, 
goods  and  information  at  the  tap  of  a  keyboard.”^  ^  “Protecting  our  citizens 
and  critical  infrastructures  at  home  is  an  intrinsic  and  essential  element 
of  our  security  strategy.  The  dividing  line  between  domestic  and  foreign 
policy  is  increasingly  blurred.  Globalization  enables  other  states,  terror¬ 
ists,  criminals,  drug  traffickers,  and  others  to  challenge  the  safety  of  our 
citizens  and  the  security  of  our  borders  in  new  ways.”^^  The  declaration  of 
infrastructures  as  vital  is  an  explicit  signal  that  the  United  States  will  pro¬ 
tect  them. 


Information  as  a  Vital  Military  Interest 


The  US  military  exceeds  the  simple 
axiomatic  urge,  typified  by  Sun  Tzu’s 
celebrated  quotation,  to  achieve  perva¬ 
sive  understanding.^^  No  longer  satis¬ 
fied  with  scrutinizing  the  field  of  combat 
better  than  the  adversary,  the  US  mili¬ 
tary  relies  on  superior  information  tech¬ 
nology  to  convert  knowledge  into  com¬ 
bat  effectiveness  (fig.  4).  In  addition  to 
traditional  information  security,  the  US 
military  is  prepared  to  conduct  offen¬ 
sive  lO  to  degrade  an  information- de¬ 
pendent  enemy’s  awareness. 


Source:  US  Atlantic  Command. 

Figure  4.  Military  Network 
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Present  Day — National  Military  Strategy 

The  1997  NMS,  subordinate  to  the  1997  iVSS,  does  not  take  the  leap 
into  information  seeurity  that  appears  in  the  1998  iVSS.  However,  it  ree- 
ognizes  the  importanee  of  information  in  seeuring  the  objeetives  of  the 
1997  JVSS.  It  states  that  the  military  works  “to  Shape  the  international  en¬ 
vironment  and  Respond  to  the  full  speetrum  of  erises,  while  we  Prepare 
Now  for  an  uneertain  future. In  the  shaping  of  the  international  envi¬ 
ronment,  information  sharing  and  military-to -military  eontaets  promote 
trust  and  eonfidenee;  transpareney  measures  in  support  of  arms  eontrol 
reduee  tensions  and  dangers.  However,  eonventional  war -fighting  eapa- 
bilities  are  “the  military’s  most  important  eontribution  to  the  shaping  ele¬ 
ment  of  the  president’s  strategy”  as  well  as  responding  to  erises.^®  As  for 
the  uneertain  future,  the  1997  NMS  refers  to  Joint  Vision  (JV)  2010  as  the 
“template  for  joint  operations  and  warfighting  in  the  future,”  whieh  “rests 
on  the  foundations  of  information  superiority  and  teehnologieal  innova¬ 
tion.”^®  (figs.  5  and  6) 


Source:  Joint  Warfighting  Center,  Concept  for  Future  Joint  Operations,  1997. 


Figure  5.  Global  Grid  Figure  6.  Components 

of  Information  Superiority 


The  Future — Joint  Vision  2010  and  the  Concept  for  Future  Joint 
Operations 

Information  superiority  is  imperative  to  joint  foree  sueeess  in  the  future 
envisioned  by  the  ehairman  of  the  Joint  Chiefs  of  Staff  (CJCS).  JV  2010 
is  the  CJCS  model  for  future  joint  war  fighting.  The  Concept  for  Future 
Joint  Operations  (CFJO)  follows  with  a  detailed  look  at  how  the  sendees 
will  proeeed  to  meet  JV  2010  operational  goals.  JV  2010  defines  informa¬ 
tion  superiority  as  “the  eapability  to  eolleet,  proeess,  and  disseminate  an 
uninterrupted  flow  of  information  while  exploiting  or  denying  an  adver¬ 
sary’s  ability  to  do  the  same.”^^  The  sueeess  of  JV  2010  relies  upon 
“emerging  teehnologies — partieularly  information-speeifie  advanees”  to 
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permit  increased  effectiveness.  The  four  essential  operational  concepts  of 
dominant  maneuver,  precision  engagement,  full- dimensional  protection, 
and  focused  logistics  will  demonstrate  this  effectiveness  (fig.  7).  In  de¬ 
scribing  these  concepts,  the  CFJO  builds  heavily  upon  the  assumption  of 
information  control. 


Information  Superiority 
and  Technological  Innovation 

End  States 

•  Economy  of  force 

•  Higher  tempo 

•  Increased  stealth,  mobility,  flexibility 

•  Ability  to  integrate  all  systems — 
sensors,  C^,  weapon  platforms,  etc. 

•  Improved  and  collaborative 
planning  systems 


Source:  Joint  Warfighting  Center,  Concept  for  Future  Joint  Operations. 

Figure  7.  Decisive  Operations 


The  CFJO  asserts  that  the  synergy  between  the  four  operational  con¬ 
cepts,  supported  by  abundant  data  streams,  wiU  permit  decisive  opera¬ 
tions.  Separately  remarkable,  their  interdependence  requires  that  each 
succeed.  ‘The  JFC,  for  example,  cannot  conduct  dominant  maneuver, 
full-dimensional  protection,  and  precision  engagement  for  extended  peri¬ 
ods  without  focused  logistics.  Likewise,  focused  logistics  is  not  possible  in 
combat  operations  without  the  umbrella  of  full-dimensional  protection. 
Sifting  through  the  hyperbole,  however,  reveals  the  specific  information 
requirements  are  merely  traditional  intelligence  needs  regarding  friendly, 
enemy,  and  terrain  conditions.  The  call  for  rapid  and  accurate  intelligence 
to  minimize  the  decision  cycle  is  chronic.  Unique,  however,  is  the  reliance 
on  information  systems  to  supplant,  and  perhaps  replace,  existing  forms 
of  human  intervention.  ‘Traditional  graphic  control  measures — such  as 
the  fire  support  coordination  line  and  unit  boundaries”  can  be  “sup¬ 
planted  by  information-based  methods,”  enabling  dominant  maneuver.^® 
Automated  targeting  and  response  drives  precision  engagement.  Data-in- 
tensive  system  transparency  permits  focused  logistics  to  achieve,  not 
just-in-case  inventory  management,  but  tailored,  just-in-time  sustain¬ 
ment.  Full  dimensional  protection  requires  the  ability  to  “see  the  battle 
space,  to  discriminate  friend  from  foe,  to  anticipate  and  rapidly  counter 
enemy  actions,  and  to  quickly  disseminate  threat  information  to  all 
forces. Full  spectrum  dominance — having  supplanted  human  beings 
with  data  streams — sinks  or  swims  on  the  reliability  of  information.  To 
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satisfy  the  balance  sheets,  a  reduction  in  the  size  of  the  US  military  is 
supposed  to  pay  for  the  JV  2010  transition.  Therefore,  an  inability  to  se¬ 
cure  information  dominance  could  result  in  a  future  with  a  smaller — per¬ 
haps  less  capable — force. 

Fragility  of  Information 

Rhetoric  has  provided  dire  visions  of  computer  hackers,  viruses,  and 
Y2K.  In  his  best  selling  novel.  Debt  of  Honor,  Tom  Clancy  describes  how  a 
rogue  element  of  the  Japanese  government  reduces  the  electronic  trans¬ 
fers  of  the  New  York  Stock  Exchange  to  worthless  garbage,  destroying  con¬ 
sumer  confidence.  Actual  events  have  served  to  heighten  fear  of  exposure. 
A  satellite  failure  caused  half  the  United  States  to  lose  its  beeper  service 
and  halted  companies’  ability  to  process  credit  card  purchases.  Hackers 
replaced  contents  of  Air  Force  and  major  media  home  pages  with  content 
ranging  from  pornography  to  political  statements.  The  Melissa  virus 
jammed  electronic  switchboards  throughout  the  country.  While  fears  of  a 
Y2K  meltdown  are  somewhat  overwrought,  insidious  dependency  on  com¬ 
puter  networks  has  left  the  United  States  susceptible  to  a  coordinated  in¬ 
formation  attack. 

In  its  report  PCCIP  provides  what  appears  to  be  the  blueprint  for 
changes  to  the  1997  iVSS.  American  lives  are  full  of  assumptions  that 
things  ordinarily  work.  When  an  alarm  wakes  someone  up,  when  a  tele¬ 
phone  is  used,  when  checks  are  written  and  bills  paid,  the  “national  in¬ 
frastructure”  acts  as  the  conduit  for  transactions.  The  PCCIP  determined 
that  there  are  several  infrastructures  which  “are  so  vital  that  their  inca¬ 
pacity  or  destruction  would  have  a  debilitating  impact  on  our  defense  and 
economic  security.  These  vital  infrastructures  include  transportation, 
oil  and  gas  production  and  storage,  the  water  supply,  emergency  services, 
government  services,  banking  and  finance,  electrical  power,  and  telecom¬ 
munications.  Given  increased  reliance  on  automation,  the  report  con¬ 
tends  that  these  systems  are  vulnerable  to  physical  and  information  at¬ 
tacks  and  real  threats  to  them  from  individuals  and  nonstate  actors 
exist. 

A  power  outage  in  San  Francisco,  California,  pointed  out  the  fragility  of 
just  one  piece  of  the  national  infrastructure.  On  8  December  1998,  a  mis¬ 
take  by  a  Pacific  Gas  and  Electric  (PG&E)  employee  caused  a  cascading 
array  of  failures  which  left  the  city  of  San  Francisco  without  primary 
power  for  six  hours. 2^  There  were  great  costs  involved  in  the  inadvertent 
shutdown.  Beyond  simple  quality  of  life  issues,  the  city’s  hospitals  had  to 
refuse  elective  surgeries  for  that  day  due  to  a  lack  of  primary  power.  A 
woman  died  after  a  hit-and-run  accident  due  to  inoperative  traffic  signals. 
The  city  of  San  Francisco  lost  the  interest  on  “the  $30  million  to  $40  mil¬ 
lion  in  property  taxes  it  takes  in  each  day  because  it  was  unable  to  put 
the  money  in  the  bank.”  San  Francisco  also  paid  overdraft  bank  charges 
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as  the  result  of  the  absent  deposits.  That  San  Franeiseo  maintains  less 
than  a  day’s  worth  of  money  in  the  bank  shows  how  dependent  soeiety 
has  beeome  on  eleetronie  transaetions  and  gives  Y2K  zealots  a  reason  to 
elamor.  Trading  halted  at  the  Paeifie  Stoek  Exehange  nearly  aU  day.  In  the 
next  three  days,  PG&E  responded  to  3,000  elaim  form  requests  for  dam¬ 
ages  to  businesses  and  individuals.^^  While  exposure  to  litigation  drives 
an  awareness  of  tnfrastrueture  proteetion  in  the  eorporate  world,  the  US 
military  remains  eoneerned  with  national  seeurity. 

Network  Vulnerability 

The  level  of  US  exposure  to  a  hostile  eomputer  attaek  that  would  se¬ 
verely  degrade  the  eritieal  infrastrueture  or  military  eapabiUty  is  unelear. 
Military-sponsored  think  tanks  warn  that  eyberterrorists  eould  “destabi¬ 
lize  and  eventually  destroy  targeted  states  and  soeieties.”^^  Cynies  view 
these  reports  as  advertisements  for  the  self-aggrandizing  information  war¬ 
fare /eomputer  seeurity  industry.  Typieal  eitizens,  already  intimidated  by 
eomputers  and  frustrated  with  “general  proteetion  faults,”  may  be  inelined 
to  believe  that  vulnerability  is  not  overblown  (fig.  8). 


Telephone 

service 

disrupted 


Source:  President’s  Commission  on  Criticai  infrastructure  Protection. 

Figure  8.  Hypothetical  Information  Attack 
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The  United  States  Is  Vulnerable 

Popular  information-war  scenarios  imagine  a  eoordinated  attaek  desta¬ 
bilizing  the  US  infrastrueture  while  other  weapons  deliver  the  knoekout 
blow.  In  an  oft-repeated  eonelusion  to  a  Pentagon  report: 

Information  warfare  specialists  at  the  Pentagon  estimate  that  a  properly  pre¬ 
pared  and  well-coordinated  attack  by  fewer  than  30  computer  virtuosos  [sic] 
strategically  located  around  the  world,  with  a  budget  of  less  than  $10  million, 
could  bring  the  United  States  to  its  knees. 

Such  a  strategic  attack,  mounted  by  a  cyberterrorist  group  .  .  .  would  shut 
down  everything  from  electric  power  grids  to  air  traffic  control  centers.  A  com¬ 
bination  of  cyberweapons,  poison  gas,  and  even  nuclear  devices  could  produce 
a  global  Waterloo  for  the  United  States.^® 

Sen.  Fred  Thompson  (R-Tenn.),  a  member  of  the  Senate  Governmental  Af¬ 
fairs  Committee,  named  “China,  Russia,  Libya,  Iran,  Iraq,  and  at  least 
seven  other  eountries”  as  ineorporating  IW  into  their  military  doetrine.^”^ 
Thompson  warned,  “we  eannot  wait  for  an  eleetronie  Pearl  Harbor  or  Ok¬ 
lahoma  City  to  reeognize  there  is  a  problem. Congressional  response  to 
the  Y2K  bug  has  heightened  awareness  of  eomputer  dependenee.  Sen. 
Robert  Bennett  (R-Utah)  and  Sen.  Chris  Dodd  (D-Conn.)  issued  warnings 
about  “one  of  the  most  serious  and  potentially  devastating  events  this  na¬ 
tion  has  ever  eneountered.”^®  The  senators  eonfirmed  the  possibility  of 
malfunetioning  missiles,  medieal  equipment,  brownouts,  and  lost  bank 
reeords.  fW  experts  are  touting  Y2K  as  the  first  “seheduled  eyber -attaek,” 
whieh  should  be  studied  to  improve  response  for  the  next  unseheduled 
one.  Multiple  haeker  sueeess  stories,  highlighted  by  eelebrated  web  page 
alterations,  have  inereased  publie  fear  of  eyberexposure.^° 

Cyberskepticism 

Noneonformist  eomputer  experts  treat  sueh  information-war  threat  see- 
narios  as  “eomputer-age  ghost  stories,”  and  note  a  laek  of  evidenee.^^  In 
partieular  they  deride  the  apparent  eult  status  of  Alvin  Toffler  within  the 
national  seeurity  establishment.  Steven  Metz  of  the  US  Army  War  College 
derides  the  hyperbole  of  Toffler’s  book.  War  and  Anti-War,  as  a  superfieial 
“MTV  elip.”®2  George  Smith,  the  editor  of  Crypt  Newsletter,  an  on-line  jour¬ 
nal  dedieated  to  debunking  information  age  myths,  puts  it:  “One  of  the 
strong  suits  of  information  warriors  appears  to  be  the  burying  of  the 
enemy  with  floods  of  vague  military  philosophy,  impenetrable  jargon, 
eliehes,  seenarios,  and  aphorisms  gathered  from  popular  books  attributed 
to  Alvin  Toffler,  Tom  Claney,  and  Sun  Tzu.”^^  Smith  points  out  erroneous 
researeh,  performed  by  presumed  experts,  whieh  reeeived  no  subsequent 
retraetions.  Federal  Bureau  of  Investigation  (FBI)  artieles  have  ineluded 
information  originally  intended  as  a  joke,  sueh  as  the  rerouting  of  White 
House  phone  ealls  to  the  imaginary  Mareel  Mareeau  University  for  Mim¬ 
ing,  or  a  nonexistent  virus  ealled  “Clinton. Other  offieially  propagated 
hoaxes  inelude  warnings  to  avoid  even  opening  E-mails  with  eertain  ti- 
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tles.^®  The  reported  number  of  intrusions  is  multiplied  due  to  assump¬ 
tions  about  the  poor  effieaey  of  deteetion.  Figures  are  further  inflated  by 
the  elassifieation  of  eertain  benign  system  interrogations,  or  “pings,”  as 
hostile.  A  laek  of  Pentagon  eandor  in  explaining  IW  seenarios  further  ag¬ 
gravates  a  eynieal  eomputer  underground.^®  Skepties  point  to  the  laek  of 
signifieant  attaeks  by  an  enemy,  sueh  as  Iraq  or  Osama  Bin  Laden,  as  ev- 
idenee  that  the  hysteria  is  exeessive. 

Information  Stress 

The  inereasing  use  of  information  and  teehnology  in  US  soeiety  has  led 
to  a  dependenee  whieh  people  are  loath  to  relinquish.  Presently,  the  ab- 
senee  of  a  signifieant  eomputer  attaek  may  be  evidenee  of  superior  US  de¬ 
fensive  IW — not  a  laek  of  exposure.  Prudenee  dietates  that  the  US  praetiee 
safe  eomputing.  In  time,  the  evolving  realm  of  eustomary  law  will  respond 
to  intentional  aets  of  eomputer  hostility.  Given  the  importanee  of  infor¬ 
mation  to  the  United  States,  it  may  be  eompelling  to  aeeelerate  the  devel¬ 
opment  of  international  law. 
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Chapter  4 


Status  Quo — Cyber  litigation 


People  are  getting  smarter  nowadays;  they  are  letting  lawyers,  instead  of  their 
conscience,  be  their  guide. 

— ^Wlll  Rogers 

The  development  of  IW  sovereignty  has  not  exaetly  followed  the  pattern 
of  other  mediums.  The  United  States  fostered  the  naseent  eomputer  net¬ 
work  grid  in  relative  international  isolation.  Therefore,  the  original  foeus 
of  eomputer  law  was  domestie,  not  international.  The  nature  of  eomputer 
erime  allows  it  to  violate  multiple  jurisdietions  instantaneously  while  the 
perpetrator  may  reside  overseas.  Combined  with  network  anonymity  and 
domestie  laws  proteeting  privaey,  this  makes  it  extremely  diffieult  to  ap¬ 
prehend  violators.  Sinee  international  law  lags  behind  domestie  law  in 
this  area,  this  ehapter  examines  the  eondition  of  US  eriminal  law. 

In  dealing  with  international  violations,  bilateral  agreements  have 
emerged  as  a  preeursor  to  unified  international  law.  Reeent  seholarship 
on  international  law  and  IW  reveals  a  divided  body  of  opinion.  Some  insist 
that  eurrent  law  adequately  proseribes  international  CNA.  These  people 
believe  that  teehnology  and  eustomary  law  should  mature  before  broker¬ 
ing  an  international  eonvention.  Others  assert  that  eurrent  laws,  written 
before  the  advent  of  eomputer  networking,  are  inadequate.  A  look  at  the 
disparate  interpretations  and  the  limited  body  of  legal  verdiets  will  shed 
light  on  the  state  of  international  eomputer  law. 

The  Cuckoo’s  Egg 

In  his  book.  The  Cuckoo’s  Egg:  Tracking  a  Spy  through  the  Maze  of  Com¬ 
puter  Espionage,  Clifford  Stoll  deseribes  just  how  little  authorities  eared 
about  the  oeeurrenee  of  eomputer  erime  in  1987.^  A  “reeyeled”  astronomer 
at  Lawrenee  Berkeley  Laboratory,  Stoll’s  attempt  to  reeoneile  a  75-eent 
shortfall  in  a  $2,387  monthly  eomputer  use  statement  revealed  an  illegit¬ 
imate  user.  Over  a  nine-month  period,  Stoll  dealt  with  loeal  and  state  law 
enforeement,  as  well  as  the  FBI,  Central  Intelligenee  Ageney  (CIA),  Na¬ 
tional  Seeurity  Ageney,  Air  Foree  Offiee  of  Speeial  Investigations,  and 
German  authorities  in  an  attempt  to  traek  down  the  operative  breaking 
into  his  eomputer  system.  Eaeh  of  the  ageneies  at  one  time  or  another  en- 
eouraged  Stoll  to  drop  his  ease  in  the  seareh  for  mere  ehange.  Not  only 
was  the  damage  apparently  minor  but  none  of  the  ageneies  eould  hope  to 
reeeive  eredit  for  “eollaring”  a  eomputer  eriminal  originating  overseas. 
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Stoll  had  to  justify  search  warrants  for  multiple  jurisdictions  to  peel 
back  each  computer  node  by  which  the  hacker  had  traveled.  Ultimately, 
the  user  emerged  as  a  group  of  West  German  nationals  conducting  espi¬ 
onage  for  East  Germany.  German  law  did  not  forbid  the  types  of  crimes 
committed  against  the  US  computer  systems.  The  Germans  justified  their 
cooperation  with  the  now  keenly  interested  US  officials  by  observing  that 
the  hackers  had  stolen  long-distance  telephone  service.  In  coordination,  a 
sting  operation  finally  caught  the  espionage  ring. 

Increased  Awareness 

Due  to  incidents  similar  to  Stoll’s,  legislation  responded  to  some  of  the 
domestic  loopholes  in  computer  law;  and  bilateral  agreements  emerged  to 
fill  some  international  gaps.  Individual  criminal  activity  has  received 
media  attention  and  placed  computer  crime  in  the  spotlight.  Present  do¬ 
mestic  laws  provide  the  FBI  with  greater  authority  in  pursuing  cyber¬ 
criminals.  In  February  1995  the  FBI  arrested  Kevin  Mitnick,  a  phone 
“phreak”  (long-distance  service  thief)  and  hacker,  long  celebrated  within 
the  computer  underworld.^  The  Department  of  Justice  (DOJ)  established 
the  NIPC  (described  in  chapter  3)  as  part  of  increased  efforts  to  combat 
computer  crime.  International  and  interagency  agreements  have  improved 
as  well.  For  example,  on  18  March  1998  DOJ  announced  the  following: 
“The  Department  of  Justice,  in  conjunction  with  the  FBI,  the  Air  Force  Of¬ 
fice  of  Special  Investigation,  the  National  Aeronautics  and  Space  Admin¬ 
istration  and  the  Naval  Criminal  Investigative  Service,  announced  today 
that  the  Israeli  National  Police  arrested  Ehud  Tenebaum,  an  Israeli  citi¬ 
zen,  for  illegally  accessing  computers  belonging  to  the  Israeli  and  United 
States  governments,  as  well  as  hundreds  of  other  commercial  and  educa¬ 
tional  systems  in  the  United  States  and  elsewhere.”^  US  Attorney  General 
Janet  Reno  warned  that  the  United  States  would  pursue  hackers  “around 
the  world  and  in  the  depths  of  cyberspace.”'^ 

The  arrest  was  dovmplayed  in  Israel,  where  Tenebaum  was  generally  re¬ 
ferred  to  as  a  childish  prankster  and  admired  by  Israeli  Prime  Minister 
Benjamin  Netanyahu  as  “da—  good  .  .  .  very  dangerous,  too.”^  Tenebaum’s 
lawyers  insisted  that  the  Pentagon  should  be  thankful  he  revealed  the  flaw 
in  their  computer  systems  before  a  spy  did.  Even  with  new  levels  of  coop¬ 
eration,  the  United  States  had  to  emphasize  the  illegal  acts  he  committed 
against  Israeli  computer  systems.  After  his  arrest  Tenebaum  became  a 
folk  hero,  receiving  book  and  movie  proposals,  television  interviews,  and 
a  computer  endorsement  contract.®  There  was  conjecture  that  he  would 
serve  his  mandatory  time  in  the  military  working  for  the  Israeli  intelli¬ 
gence  service.  On  9  February  1999,  under  discreet  US  pressure,  Israel  fi¬ 
nally  indicted  him  under  their  domestic  law.  In  the  meantime,  the  United 
States  has  little  hope  for  extradition. 
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Information-war  Law:  Stage  One — Debate 


Military  attorneys  have  eoneluded  that  existing  laws  adequately  eover 
IW.  In  the  Primer  on  Legal  Issues  in  Information  Operations,  the  Head¬ 
quarters  US  Air  Foree  (USAF)  international  law  division  provides, 

The  Air  Force  has  adopted  the  term — “Information  attack” — to  refer  to  altering 
Information  without  visibly  changing  the  physical  entity  within  which  It  resides. 

Much  discussion  and  debate  will  be  devoted  to  these  subjects  In  the  coming 
decade  or  two,  but  It  seems  most  Ukely  that,  in  the  end,  existing  legal  principles 
will  be  successfully  extended  to  these  new  technologies  without  the  need  for  much 
fundamental  Innovation.  However,  just  as  Information  operations  techniques  often 
Involve  highly  complex  applications  of  technology,  the  legal  environment  In  which 
they  operate  often  Involves  similarly  complex  applications  of  law.  Consequently,  In¬ 
formed  legal  advice  at  the  planning  stage  of  Information  operations  Is  especially 
vital.  So  long  as  most  Information  operations  programs  are  maintained  In  specM 
access  programs,  only  attorneys  who  have  been  cleared  for  access  to  such  pro¬ 
grams  can  be  Involved  in  providing  detailed  legal  advice.’’ 

The  primer  states  that  during  peaeetime,  espeeially  within  the  realm  of 
lO,  the  definition  of  a  “use  of  foree”  beeomes  eomplex.®  It  relies  on  the  es¬ 
tablished  preeedent  of  eovert  aetion  to  justify  what  otherwise  would  be 
eonsidered  a  use  of  foree  during  peaeetime.  Within  this  model  the  exeeu- 
tive  braneh  maintains  extraordinary  oversight  of  eovert  aetion  by  the  CIA 
or  other  ageneies.  Coneerning  states’  rights  to  neutrality,  the  primer  al¬ 
lows  the  importanee  of  delineation  between  the  eonditions  of  peaee  and 
war.  Ironiealfy,  the  text  then  derides  the  term  act  of  war  as  “a  singularly 
impreeise  and  unhelpful  eoneept”  whieh  is  outdated.®  The  primer  prefers 
to  foeus  on  the  “whole  range  of  less  serious  breaehes  of  the  rights  of  other 
nations  under  international  law  that  still  earry  signifieant  sanetions  for  vi¬ 
olation.”^®  Meanwhile,  other  opinion  attempts  to  deseribe  the  eireum- 
stanees  when  Jus  ad  helium  or  self-defense  apply. 

Mark  R.  Jaeobson,  a  doetoral  eandidate  at  Ohio  State  University’s  Mer- 
shon  Center,  believes  the  ambiguity  in  UN  eharter  definitions  is  taeit  ap¬ 
proval  for  open  interpretation.  “After  all,  the  members  of  the  General  As¬ 
sembly  did  not  eonsider  their  list  of  ‘traditional  aets  eonstituting 
aggression,’  inelusive  of  every  eoneeivable  form  of  aggression.”^ ^  In  this 
vein  Jaeobson  believes  that  “therefore,  armed  attaeks  may  be  those  whieh 
involve  the  use  of  any  sort  of  equipment  whieh  enables  us  to  gain  a  mili¬ 
tary  advantage  against  our  enemy.  He  eoneurs  with  Miehael  Walzer  that 
a  nation  has  the  right  to  self-defense  when  a  nation  pereeives  the  follow¬ 
ing  on  the  part  of  an  aggressor:  “an  intent  to  injure,  aetive  preparation 
making  intent  a  positive  danger,  and  a  general  situation  in  whieh  waiting 
or  doing  anything  other  than  fighting,  greatly  magnifies  the  risk. To  his 
eredit  Jaeobson  appreeiates  the  elassie  seeurity  dilemma,  whieh  provides 
that  enhaneing  one  nation’s  seeurity  is  likely  to  result  in  another  nation’s 
inseeurity.  In  the  deeision  to  aet  within  this  dilemma,  Jaeobson  asks  the 
aggrieved  nation  to  evaluate  the  aggressor’s  “potential  for  damage,  effee- 
tive  range  of  the  enemy  weapons  and  the  overall  intent  of  the  attaek.”^'^ 
His  eonfidenee  in  a  state’s  ability  to  eonduet  sueh  analysis  matehes  his 
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faith  that  “the  present  system  of  international  law  will  likely  prove  re¬ 
silient  enough  to  deal  with  both  new  and  non-traditional  threats. 

Lt  Col  Miehael  N.  Sehmitt,  deputy  ehairman  of  the  law  department  at 
the  US  Air  Foree  Aeademy,  adds  justifieation  for  this  assessment.  In  his 
essay,  “Computer  Network  Attaek  and  the  Use  of  Foree  in  International 
Law:  Thoughts  on  a  Normative  Framework,”  Sehmitt  disseets  the  nuanees 
between  IW  and  traditional  kinetie  warfare  and  emerges  with  a  workable 
international  law  environment.  He  eoneludes  that  “traditional  appliea- 
tions  of  the  use  of  foree  prohibition  fail  to  adequately  safeguard  shared 
eommunity  values  threatened  by  CNA.”^®  Arguing  for  a  nontraditional  ap- 
plieation,  Sehmitt  embraees  the  flexibility  of  the  UN  seeurity  regime.  He 
suggests  limiting  aets  in  self-defense  to  de  faeto  armed  attaeks.  His  model 
would  inerease  global  stability  by  limiting  the  use  of  CNA.^^ 

Regarding  the  UN  eharter’s  stand  on  the  use  of  foree  in  Artiele  2(4), 
Sehmitt’s  framework  would  proseribe  CNA  if  an  attaek  intends  to  eause 
physieal  damage  or  human  injury  or  if  its  effeet  resembled  that  of  armed 
foree.  Sehmitt  provides  room  for  self-defense  under  Artiele  51  for  those  in- 
stanees  where  a  eomputer  infraetion  does  not  eross  the  use-of-foree 
threshold  but  is  a  preeursor  to  attaek.  A  preemptive  aet  in  self-defense  is 
justifiable  if  it  oeeurs  during  the  last  possible  window  of  opportunity  and 
the  eomputer  intrusion  is  an  irrevoeable  step  in  an  imminent  and  un¬ 
avoidable  attaek.^®  He  aeknowledges  that  at  levels  below  these  thresholds, 
the  Seeurity  Couneil  would  have  to  intervene  to  prevent  a  breaeh  of  the 
peaee.  ‘This  may  be  faint  eonsolation  for  the  State  faeing  a  serious  eom¬ 
puter  network  attaek,  but  from  a  world  order  perspeetive  it  represents  the 
optimal  alternative.”^®  He  admits,  however,  that  eonsensus  on  a  new 
framework,  “let  alone  its  substantive  eontent,  is  unlikely  to  gel  any  time 
in  the  near  future.”^® 

A  positivist  opinion  of  existing  law  finds  that  ambiguity,  heralded  by 
naturalists,  is  aetually  a  loophole  big  enough  to  drive  an  eleetronie  inva¬ 
sion  through.  For  the  purpose  of  organization,  that  side  of  the  debate  will 
be  represented  in  the  next  ehapter. 

Information-war  Law: 

Stage  Two — Customary  Law  Develops 

The  body  of  offieial  and  preeedent-setting  legal  deeisions  on  CNA  is 
steadily  growing.  However,  as  with  the  Law  of  the  Sea,  different  nations 
are  reaehing  different  eonelusions.  In  a  signifieant  event  heralding  the  ap- 
proaeh  of  the  new  millennium,  the  first  (alleged)  state  versus  state  infor¬ 
mation  attaek  reeently  took  plaee. 

The  Empire  Strikes  Back 

On  9  September  1998,  the  Pentagon  finally  reaeted  to  a  CNA  with  a  re¬ 
sponse  in  kind;  by  January  1999  the  legal  ramifieations  of  that  riposte 
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were  still  unelear.^^  An  aetivist  group  ealled  the  Eleetronie  Disturbanee 
Theater  tried  to  overwhelm  the  eomputer  network  at  the  Pentagon.  Tied  to 
the  Zapatista  rebels  in  Chiapas,  Mexieo,  the  group  wanted  to  respond  to 
what  it  alleged  was  US  support  for  the  Mexiean  government.  Eaeh  time 
someone  logged  onto  the  Eleetronie  Disturbanee  Theater  web  page  it  au- 
tomatieally  downloaded  a  small  Java  applet  to  their  eomputers,  whieh  ini¬ 
tiated  repeated  aeeess  requests  to  DefenseL/iVK.  In  this  fashion  the  efforts 
of  many  eombined  in  a  unified  attempt  to  overwhelm  the  Pentagon  server. 
The  Pentagon  responded  in  kind.  “Onee  an  attaeker  was  identified,  the 
Pentagon’s  eomputers  sent  a  program  baek  to  the  aetivist’s  eomputer  that 
shut  down  his  or  her  Web  browser,  ending  the  attaek.”^^  The  Pentagon  ey- 
berwarriors  were  not  immediately  aware  of  the  threshold  they  had 
erossed. 

Proving  that  the  military  needs  guidanee  in  IW  law,  the  Pentagon  ere- 
ated  a  legal  team  to  steer  “through  the  often  murky  waters  of  information 
warfare. The  team  will  be  part  of  the  Joint  Task  Foree  for  Computer 
Network  Defense,  stood  up  on  30  Deeember  1998  to  maintain  eonstant 
surveillanee  of  Department  of  Defense  eomputer  systems.  Stepping  baek 
from  previous  aetions,  the  task  foree  is  to  serve  purely  as  a  defensive 
foree.  The  task  foree  is  “prohibited  from  engaging  in  offensive  information 
warfare  operations  like  the  episode  of  Sept.  9.”^'^  However,  the  task  foree 
eommander.  Air  Foree  Maj  Gen  John  H.  Campbell,  eoneedes  there  are  a 
lot  of  gray  areas  between  offensive  and  defensive  methods.  ‘The  gray  areas 
will  need  to  be  resolved  on  a  ease-by-ease  basis.  There  will  always  be 
eases  where  aetive  measures  are  benefieial.”^®  The  task  foree  will  eoordi- 
nate  responses  to  CNAs  by  the  various  eomputer  emergeney  response 
teams. 

While  the  Pentagon  seeks  ways  to  passively  defend  its  domain,  ju- 
risprudenee  overseas  may  be  ereating  a  haeker’s  haven.  On  15  Deeember 
1998,  Norway’s  Supreme  Court  ruled  that  “trying  to  break  into  a  eom¬ 
puter  over  the  Internet  is  not  a  erime  until  the  system  is  aetually 
breaehed.’’^®  The  Norwegian  eourt  stated  that  those  who  eonneet  to  the  In¬ 
ternet  are  responsible  for  proteeting  themselves.  The  judgment  eame  in 
response  to  a  ease  against  an  Oslo-based  eomputer  seeurity  firm.  The 
firm,  Norman  Data  Defense  Systems,  attempted  to  breaeh  the  University 
of  Oslo’s  eomputer  seeurity  as  part  of  a  news  report  for  the  Norwegian 
state  broadeasting  network.  The  eourt  dismissed  a  lower  eourt  ruling,  rea¬ 
soning  that  the  eompany  had  not  broken  into  the  network  but  had  just 
diseovered  how  to  do  it. 

In  what  may  prove  to  be  the  first  doeumented  ease  of  state-sponsored 
IW,  an  Irish  Internet  provider — hosting  East  Timor’s  web  domain — is  ae- 
eusing  Indonesia  of  attaeking  its  eomputer  servers. East  Timor,  oeeu- 
pied  by  Indonesia  sinee  1975,  deelared  its  “virtual  independenee”  in  1998 
with  the  administration  of  its  own  top-level  domain,  “.tp.”^®  After  the 
launeh  of  the  East  Timor  domain,  the  Indonesian  embassy  relayed  its  eon- 
eern  to  the  Irish  Times  about  the  misuse  of  eomputer  freedom  to  eampaign 
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against  Indonesia.  Connect-Ireland,  the  Irish  server  that  hosted  the  do¬ 
main,  was  the  foeus  of  a  eoordinated  attaek  during  late  January  1999. 
The  server’s  projeet  direetor,  Martin  Maguire,  asserted,  ‘There  were  18  si¬ 
multaneous  attaeks  on  our  server  by  robots  trying  to  elaw  down  our  de¬ 
fenses. Onee  in,  eraekers  set  up  their  own  domain,  “need.tp,”  with  the 
possible  aim  of  using  it  for  propaganda  against  East  Timor.  In  spite  of  un- 
eertainty  as  to  the  origin  of  the  attaek,  Conneet-Ireland  plaeed  the  blame 
direetly  on  the  Indonesian  government.  Sinee  the  attaek  the  UN  has  bro¬ 
kered  a  vote  for  greater  autonomy  for  the  territory,  whieh  was  seheduled 
in  1999.30 


Location  of  Information  Warfare  on  the 
International  Law  Continuum 

The  evolution  of  IW  law  is  deep  into  stage  one  (opinion)  and  has  entered 
into  stage  two  (eustom).  Stoll’s  book  still  rings  true  and  is  a  guide  for  the 
greater  problems  faeed  today.  Computer  program  authors  are  in  a  seeu- 
rity  dilemma.  Announee  a  pressing  seeurity  need  openly,  and  the  eus- 
tomers  panie  or  lose  faith.  Be  disereet,  and  the  system  managers  ignore  it 
as  unimportant.  31  Privaey  issues  prevent  digital  identifieation  and  pursuit 
of  eriminals  without  a  eourt  order  from  eaeh  jurisdietion.  In  the  interna¬ 
tional  realm,  eaeh  jurisdietion  may  interpret  the  issue  differently,  further 
eomplieating  the  matter.  With  multiple  eompeting  agendas,  a  workable 
agreement  on  a  legal  interpretation  would  likely  enthuse  no  one  and  pro¬ 
voke  many.  The  question  remains — Is  a  future  with  eonvention  better 
than  the  status  quo? 
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Chapter  5 


The  International  Regime 
for  Information  Security  Model 


To  debate  the  appeal  of  international  eonvention  on  CNA,  it  is  neeessary 
to  develop  a  model  for  one.  Sinee  a  legal  model  represents  a  work  in 
progress,  its  limits  will  differ  from  a  final  solution.  In  spaee  law  the  mer¬ 
its  of  delineating  sovereignty  were  largely  the  same  for  eaeh  of  the  pro¬ 
posed  limits,  differing  only  by  degree.  Similarly,  the  advantages  and  dis¬ 
advantages  of  an  IW  model  relative  to  the  status  quo  should  remain  the 
same,  only  ehanging  by  degree.  Just  as  early  spaee  law  debate  established 
a  need  for  air  sovereignty  limits,  an  examination  of  the  proposed  informa¬ 
tion  regime  will  determine  if  eonvention  is  desirable. 

The  International  Regime  for  Information  Seeurity  (IRIS)  model  mirrors 
the  sanetuary  of  a  weapons-free  outer  spaee  without  limiting  weapons 
proliferation.  Spaee  is  a  eapital-intensive  medium,  prone  to  long  develop¬ 
ment,  where  operations  are  diffieult  to  eoneeal.  Information  weapons  get 
eheaper  by  the  day  and  ean  be  eoneealed  in  the  mind  of  one  person,  sueh 
as  Mitniek.  Within  the  IRIS  model,  the  proliferation  of  information 
weapons  is  not  proseribed,  it  is  assumed.  However,  the  model  prohibits 
the  use  of  CNA  in  peaeetime.  In  many  instanees  the  model  simply  eodifies 
what  appears  to  be  universally  aeeepted  eustomary  law.  A  few  definitions 
are  in  order  before  deseribing  the  model. 

Computer  network  attack.  From  Joint  Publieation  (JP)  3-13,  Joint 
Doctrine  for  Irformation  Operations.  Consists  of  “operations  to  disrupt, 
deny,  degrade,  or  destroy  information  resident  in  eomputers  and  eom- 
puter  networks,  or  the  eomputers  and  networks  themselves.”^ 

Host  consent.  Physieal  human  response  in  a  manner  of  aeknowledg- 
ment  (sueh  as  a  keystroke  or  mouse  eliek). 

Modification.  Any  software,  firmware,  or  hardware  ehange  performed 
on  a  eomputer  system. 

Passive  modification.  The  plaeement  of  programs  onto  another  eom¬ 
puter  without  host  eonsent.  Typieal  uses  of  passive  modifieation  inelude 
Java  applets,  eookies,  and  data  eolleetion  paekets.  There  are  many  ad¬ 
vantages  to  passive  modifieation  whieh  inelude  the  storage  of  form  data  to 
save  time  on  subsequent  site  “visits,”  or  of  individual  preferenees  to  per¬ 
sonalize  a  subsequent  browsing  oeeurrenee  sueh  as  “My  CNN.” 

Unrelated  data.  Information  within  a  eomputer  system  that  is  irrele¬ 
vant  to  another  program’s  effeetiveness.  For  example,  a  Java  applet  de¬ 
signed  to  teaeh  a  math  lesson  does  not  need  to  know  how  many  Mierosoft 
Word  doeuments  are  on  the  host  eomputer.  To  the  Java  applet,  the  num¬ 
ber  of  Word  doeuments  is  unrelated  data. 
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Blocking  software.  Software,  normally  part  of  the  network  program, 
whieh  limits  passive  modifieation.  Sealable  to  levels  of  seeurity,  bloeking 
software  restriets  the  types  of  passive  modifieation  permitted  on  a  system. 
For  example — the  Netseape  and  Mierosoft  browsers  ean  limit  aeeeptanee 
of  eookies  or  Java  applets  independently  to  “always  aeeept,”  “prompt  to 
aeeept,”  or  “always  rejeet.” 

The  following  fundamental  guidelines  would  exist  under  a  peaeetime 
IRIS  regime. 

1.  Boundary — nation’s  sovereignty  eonsists  of  all  information  net¬ 
works  within  or  owned  by  a  state — that  is  telephone  eireuits,  satel¬ 
lites,  eommunieation  nodes,  eomputer  systems,  ete. 

2.  Freedom  of  information  transfer — ^With  the  exeeption  of  benign  data 
eompression  or  deeompression,  no  one  may  modify  information  in 
transit  or  by  inaetion  allow  information  in  transit  to  beeome  modified. 

3.  Tampering — No  nation  may  eovertly  modify  any  part  of  an  informa¬ 
tion  system  external  to  its  boundary. 

4.  Passive  modifieation  bloeking — Passive  modifieation  is  permitted 
only  to  systems  that  have  the  eapability  to  bloek  it  and  have  eleeted 
not  to. 

5.  Prohibited  modifieations — ^The  following  are  explieitfy  prohibited. 

a.  Any  modifieation  that  masks,  ehanges,  or  allows  to  be  ehanged, 
the  performanee  of  a  system’s  bloeking  software. 

b.  Any  modifieation  that  ehanges,  or  allows  to  be  ehanged,  unre¬ 
lated  data  without  host  eonsent. 

e.  Any  modifieation  that  results  in  the  retrieval  of  unrelated  data  to 
external  systems  without  host  eonsent. 

6.  Extradition — Nations  agree  to  proseeute  individuals  or  groups  that 
violate  this  model  from  within  the  nation’s  boundary  or  to  deliver 
the  transgressors  to  the  aggrieved  nation. 

7.  Aggression — State-sponsored  violations  of  this  agreement  may  be 
eonsidered  an  aet  of  aggression  under  the  provisions  of  the  UN 
eharter. 

8.  Armed  foree — State-sponsored  exeeution  of  eomputer  network  at- 
taek  may  be  eonsidered  the  use  of  armed  foree  under  the  provisions 
of  the  UN  eharter. 


Advantages 

There  are  two  fundamental  advantages  assoeiated  with  the  implemen¬ 
tation  of  an  IRIS  model: 

•  Inereased  seeurity  in  the  peaeetime  information  network. 

•  A  ehange  in  foeus  for  naseent  information  warriors. 

The  main  assumption  is  that  adherenee  to  the  regime  will  be  universal. 
The  advantages  diseussed  below  are  examined  from  a  US  perspeetive; 
however,  many  of  them  would  direetly  benefit  all  nations. 
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A  Protection  Regime 

Elimination  of  CNA,  as  an  ideal,  would  protect  vital  US  information  in¬ 
frastructures.  Although  the  United  States  would  lose  the  opportunity  to 
take  advantage  of  present  legal  ambiguity,  the  regime  would  benefit  the 
United  States  overall  because  it  is  the  nation  most  dependent  on  infor¬ 
mation  systems. 

Information  age  weapons  are  equalizers.  They  help  small  nations  against  large 
nations  and  favor  the  weak  over  the  strong.  Examples  Include  Stinger  missiles 
used  by  the  Mujahedin  against  the  Russians  and  computer  viruses  designed  to 
Invade  Individual  weapon  systems  or  an  entire  defense  computer  network.  ^  See 
figure  9. 
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Legend: 

CC&D — camouflage,  concealment,  and  deception 
IW — Information  warfare 

RSTA — reconnaissance,  surveillance,  and  target  acquisition 
WMD — weapons  of  mass  destruction 


Source:  Joint  Warfighting  Center,  Concept  for  Future  Joint  Operations. 

Figure  9.  Asymmetric  Leverage 


The  real  problem  lies  In  the  fact  that  today’s  breakthrough  technologies  In  elec¬ 
tronics,  computer  systems,  software,  and  telecommunications  come  from  the 
commercial  marketplace  and  are  available  to  anyone  In  the  world.  Further¬ 
more,  foes  may  use  these  technologies  to  their  advantage  without  even  resort¬ 
ing  to  military  applications.^ 
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In  major  conflicts  the  United  States  has  a  reputation  of  waiting  to  reeeive 
the  first  blow  to  demonstrate  its  reluetanee  to  go  to  war.  Due  to  US  re- 
lianee  on  information  systems,  as  illustrated  in  ehapter  3,  an  information 
Pearl  Harbor  eould  have  far  greater  eonsequenees  than  did  the  Japanese 
attaek  in  1941. 

Crisis  Stability 

Inereasing  the  reaetion  time  available  when  eonfliets  arise  will  bolster 
erisis  stability.  The  United  States,  as  the  lone  world  superpower,  has 
mueh  to  gain  from  the  maintenanee  of  the  status  quo.  Current  fW  plans 
are  elassified;  however,  prevalent  information  war  theory  antieipates  the 
preeursoiy  plaeement  of  “time  bomb”  attaek  algorithms  within  an  enemy’s 
network.  Commereial  programs.  E-mails,  web  pages,  et  eetera,  may  eon- 
tain  embedded  viruses.  In  renowned  nuelear  submarine  strategy,  the 
ship’s  eaptain  maintains  the  launeh  eodes  and  eriteria.  If  an  enemy  de¬ 
stroys  the  national  eommand  authority,  the  submarine  ean  autonomously 
launeh  a  retaliatory  blow.  This  enhanees  erisis  stability  sinee  a  knoekout 
first  strike  is  unlikely.  Similarly,  viruses  ean  be  fused  to  diseharge  on  a 
eertain  date,  when  triggered  by  a  signal,  under  a  eertain  set  of  host  eir- 
eumstanees,  or — if  not  periodieally  amended — by  a  remote  “eommand 
eenter.”  However,  the  virus’s  existenee  within  another  state’s  boundary 
eould  be  as  destabilizing  as  a  Trident  submarine  in  the  Blaek  Sea.  Benign 
just-in-ease  viruses,  under  the  wrong  eireumstanees,  might  beeome  in¬ 
flammatory  reasons  for  an  adversary’s  preemptive  information  attaek  or 
eonventional  mobilization.  The  problem  is  similar  to  eontinental  Europe  in 
1914,  as  explained  by  Thomas  C.  Sehelling  in  Arms  and  Influence.  ‘The 
steps  by  whieh  a  eountry  got  ready  for  war  were  the  same  as  the  steps  by 
whieh  it  would  launeh  war,  and  that  is  the  way  they  looked  to  an  enemy. 
No  one  ean  quite  say  just  when  the  war  started.  There  was  a  great  start¬ 
ing  of  engines,  a  elutehing  and  gearing  and  releasing  of  brakes  and  gath¬ 
ering  momentum  until  the  maehines  were  on  eollision  eourse.  There  was 
no  ‘final’  deeision;  every  deeision  was  partly  foreed  by  prior  events  and  de- 
eisions.  The  range  of  ehoiee  narrowed  until  the  alternatives  were  gone.”"^ 

Embedded  eomputer  viruses  poised  to  attaek  the  very  systems  de¬ 
signed  for  retaliation  plaee  a  state  in  a  use  it  or  lose  it  predieament.  As 
with  nuelear  theory,  this  ereates  erisis  instability.  Furthermore,  it  is  im¬ 
plausible  to  borrow  from  nuelear  stability  theory  the  ereation  of  explie- 
itly  eountervalue  information  weapons  sinee  the  teehnology  to  aim  at 
eivilians  is  that  required  to  aim  at  forees.  In  an  IRIS  regime,  the  elear 
eommunieation  of  rules  banning  preemptive  plaeement  lessens  the  risks 
of  brinkmanship. 

Cultural  Agreement  While  the  Iron  Is  Hot 

International  settlement  of  IW  issues  will  ease  anxiety  about  divergent 
interpretations.  US  legal  experts  have  great  ideas  about  the  applieability 
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of  existing  law.  Unfortunately,  it  may  not  be  in  another  nation’s  best  in¬ 
terest  to  adopt  the  same  eonelusion.  As  transpired  with  interpretations  in 
maritime  law,  disputes  over  virtual  sovereignty  may  lead  to  squabbles, 
eonfliets,  and  reprisals.  The  Norwegian  deeision  allowing  break-in  at¬ 
tempts  short  of  trespass  is  a  prime  example. 

Arne  Laukholm,  director  of  Information  Technology  for  the  University  of  Oslo, 
said  the  ruling  opens  the  way  for  systematic  and  malicious  attacks  on  comput¬ 
ers.  He  said  protecting  computers  hooked  up  to  the  global  network  against  such 
hacking  Is  difficult  and  expensive. 

Dave  Farber,  a  computer  expert  at  the  University  of  Pennsylvania,  called  It  “a 
bad  precedent”  that  could  allow  hackers  to  operate  legally  In  Norway,  even  If 
their  actions  violated  other  nations’  laws.® 

As  with  the  Law  of  the  Sea,  the  IRIS  regime  bridges  eultural  divides  by  em¬ 
phasizing  the  rewards  all  will  reap  in  a  stabilized  system.  Meanwhile,  the 
United  States  ean  trade  its  present  leverage  for  future  harmony. 

US  preeminenee  in  lO  will  tend  to  wane  as  time  passes.  Now,  while  the 
iron  is  hot,  is  the  time  to  strike  an  agreement.  Samuel  P.  Huntington,  in 
‘The  Clash  of  Civilizations,”  sees  the  non -Western  world  elosing  the  gap  in 
eeonomie  and  military  strength.  “Henee  the  West  will  inereasingly  have  to 
aeeommodate  these  non-Western  modern  eivilizations  whose  power  ap- 
proaehes  that  of  the  West  but  whose  values  and  interests  differ  signifi- 
eantly  from  those  in  the  West.”®  Aeting  now  will  eapitalize  on  the  West’s 
eurrent  edge  in  politieal  throw-weight  as  the  future  “will  inereasingly  be 
de-Westernized  and  beeome  a  game  in  whieh  non-Western  eivilizations  are 
aetors  and  not  simply  objeets.”^ 

Interdependence 

An  IRIS  regime  will  enhanee  interdependenee  by  reinforeing  the  global 
information  infrastrueture  (GII).  By  deereasing  the  threat  of  using  infor¬ 
mation  systems,  the  eomfort  level  with  eonduet- 
ing  eleetronie  data  interehange  will  inerease.  Con¬ 
sequently,  more  states  will  reaeh  the  information 
age  sooner.  Inereased  eonfidenee  in  the  GII  will 
hasten  the  eyele  of  eeonomie  progress  and  provide 
the  inherent  stability  of  global  prosperity.  Taking 
a  passage  from  the  State  Department’s  faet  sheet 
on  the  Law  of  the  Sea  and  morphing  it  into  an 
IRIS  essay  provides  an  illustration  (ehanges  in 
italies).  See  figure  10. 

The  United  States  has  Important  and  diverse  Inter¬ 
ests  In  the  realm  of  information.  As  the  world’s  pre¬ 
eminent  telecommunications  consumer,  the  United 
States  has  a  national  security  Interest  In  the  ability 
to  freely  transmit  data  as  essential  preconditions  for 
projecting  military  power.  The  end  of  the  Cold  War 
has,  If  anything,  highlighted  this  need.  Ensuring  the 
free  flow  of  commercial  information  Is  likewise  a 


Source:  Commission  on  Giobai 
Governance  home  page,  n.d., 
n.p.;  on-iine,  Internet,  avaiiabie 
at  http://www/  egg. oh. 

Figure  10.  Interdepen¬ 
dence 
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basic  concern  for  the  United  States  as  a  major  trading  power,  whose  economic 
growth  and  emplo5mient  Is  Inextricably  linked  with  a  robust  and  growing  export 
seetor.  By  far,  the  bulk  of  International  trade  relies  upon  secure  data  inter¬ 
change. 

At  the  same  time,  the  United  States,  with  one  of  the  largest  communication  in¬ 
frastructures  of  any  nation  In  the  world,  has  basle  resource  and  environmental 
Interests  In  computer  security.  Online  and  offline  systems  generate  vital  eco- 
nomle  activities — the  internet,  academic  research,  ports  and  transportation  au¬ 
tomation  and.  Increasingly,  recreation  and  gaming.  The  development  of  knowl¬ 
edge  industries  offers  the  potential  for  eeonomically  and  strategleally  Important 
data  resources.  The  health  and  well-being  of  networked  populations — the  ma¬ 
jority  of  Americans  use  the  internet — are  Intimately  linked  to  the  quality  of  the 
information  environment. 

Pursuit  of  these  objectives,  however,  requires  eareful  and  often  difficult  balanc¬ 
ing  of  Interests.  As  a  cybernetic  nation,  for  example,  we  naturally  tend  to  seek 
maximum  control  over  the  data  external  to  our  domain.  Equally,  as  a  major  in¬ 
formation  power,  we  often  view  such  efforts  on  the  part  of  others  as  unwar¬ 
ranted  limitations  on  legitimate  rights  of  transmission.^ 

Clearly,  the  advantages  of  ratifying  the  Law  of  the  Sea  readily  transfer  to 
a  Law  of  Information.  Some  states,  taking  a  strietly  realistie  view,  may  see 
their  relative  loss  instead  of  their  net  gain.  This  is  a  selfish,  outdated  view 
that  values  rank  over  abundanee.  “Unlike  the  Cold  War  era,  politieal  and 
eeonomie  interdependeney  in  the  information  age  requires  eooperation 
and  the  open  exehange  of  knowledge.”® 

Simplified  Rules  of  Engagement 

Information  operations  rules  of  engagement  (ROE)  would  benefit  from 
the  elarity  provided  by  eonvention.  Colonel  Sehmitt’s  paper  does  a  bril¬ 
liant  job  presenting  his  analysis  of  how  to  eonstrue  the  applieation  of  ex¬ 
isting  law  to  IW.  A  eodified  international  agreement  based  on  his  frame¬ 
work  would  be  a  reasonable  solution  and  rein  in  uneertainty.  However,  the 
faet  that  it  takes  more  than  50  pages  (14,500+  words)  for  an  attorney  to 
explain  to  other  attorneys  one  possible  way  to  interpret  existing  law 
demonstrates  how  dubious  it  must  seem  to  eommanders  not  trained  in 
law.  Even  if  it  were  elementary,  wishing  other  nations  would  interpret  law 
the  same  way  would  not  make  it  so.  Sehmitt  himself  eharaeterizes  the 
ehanees  of  near-term  international  agreement  on  lO  law  as  unlikely.^® 
Through  no  fault  of  their  own,  the  Sehmitt  artiele  and  the  Air  Foree’s  A 
Primer  on  Legal  Issues  in  Information  Operations  both  must  hedge  against 
the  absolute  applieability  of  their  solutions.  An  examination  of  the  in- 
stanees  of  qualifying  words  (see  table  1)  within  the  main  bodies  of  the  two 
doeuments  sheds  light  on  a  reason  for  pause.  For  eomparison  this  audit 
uses  four  reeent  Stanford  Technology  Law  Journal  artieles  not  related  to 
IW.  Granted,  hypothetieal  environments  make  eertainty  diffieult.  However, 
rates  of  14.8  and  23.5  pereent  seem  to  refleet  an  underlying  ambiguity  in 
international  law.  Consequently,  time  spent  reaehing  agreement  at 
“ground  speed  zero”  will  pay  off  when  a  eommander  must  make  a  rapid 
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decision  to  engage.  Delineation  of  where  lO  crosses  the  boundary  from  es¬ 
pionage  into  aggression  or  use  of  armed  force  will  simplify  ROE  and  re¬ 
duce  the  time  necessary  to  complete  the  planning  process. 


Table  1 

Qualifying  Word  Use 


Schmitt 

AF 

This 

Stanford 

Paper 

Primer 

Thesis 

Journal 

arguably 

3 

1 

0 

2 

fairly 

1 

1 

0 

4 

generally 

6 

6 

3 

11 

likely 

18 

3 

9 

12 

maybe 

13 

19 

13 

19 

might 

19 

10 

14 

26 

meet 

22 

14 

12 

50 

probably 

5 

7 

0 

2 

Total 

87 

61 

51 

126 

Sentences 

588 

260 

824 

1,139 

%  qualified 

14.8% 

23.5% 

6.0 

11.1% 

Intellectual  and  Fiscal  Balance 

Openly  accepting  an  IRIS  regime  will  partially  disarm  IW  zealots  in  their 
misguided  attempts  to  recreate  Douhet’s  vision  through  “command  of  the 
infrastructure.”  Douhet’s  vision  of  strategic  bombardment  exaggerated 
the  capability  of  airpower  and  led  to  derision  from  nonbelievers.  IW,  with 
its  attendant  hyperbole  about  the  electron  being  the  ultimate  precision- 
guided  weapon,  may  suffer  the  same  fate.  If  present  US  capabilities  were 
anywhere  near  their  advance  billing,  a  US  information  war  would  have 
convinced  Saddam  Hussein  to  abdicate  and  erased  all  the  secret  “how-to” 
nuclear  development  documents  from  North  Korean  computers. 

Intellectual  balance  will  also  contribute  to  fiscal  balance.  While  the  ac¬ 
tual  figures  are  classified,  money  no  longer  spent  on  developing  a  peace¬ 
time  CNA  can  be  spent  on  defensive  lO.  As  with  the  space  race,  an  IRIS 
regime  would  focus  the  information  age  competition  in  the  civil,  rather 
than  the  military,  sector. 
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Disadvantages 


Opponents  of  an  IRIS  regime  foeus  on  what  the  United  States  or  indi¬ 
viduals  would  lose,  rather  than  gain.  Proving  that  adversity  makes  strange 
bedfellows,  the  IRIS  regime  would  be  opposed  by  eivil  libertarians,  the  in- 
telligenee  eommunity,  and  the  military. 

Privacy 

Civil  liberties  groups,  sueh  as  the  Center  for  Demoeraey  and  Teehnol- 
ogy  (see  fig.  1 1),  oppose  an  IRIS  regime  as  an  invasion  of  privaey.  For  the 
IRIS  regime  to  be  eredible,  digital  identifieation  of  eommunieation  sourees 
is  neeessary  to  prevent  anonymous  attaeks.  Privaey  advoeates  rejeet  dig¬ 
ital  identifieation  as  faeilitating  an  Orwellian  effort  to  traek  the  lives  of  pri¬ 
vate  eitizens.  Automated  data  eolleetion  is  eritieal  to  taking  advantage  of 
the  information  revolution,  but  it  ean  be  used  for  benefieial  or  harmful 
purposes.  The  study  of  information  to  examine  network  performanee,  im¬ 
prove  sendee,  or  otherwise  assist  the  eonsumer  is  a  tremendous  benefit  of 
automated  retrieval.  Conversely,  it  ean  be  used  for  “data  mining”  to  target 
unsolieited  advertising  or  for  intelligenee  gathering  to  determine  system 
vulnerabilities.  Owing  to  the  duality  of  information,  it  is  not  feasible  to  de¬ 
lineate  a  universal  boundary  between  good  data  retrieval  and  bad.  The  re¬ 
maining  alternative  is  to  arrange  for  the  seleetive  bloeking  of  data,  whieh 
the  IRIS  regime  does.  Someone  not  satisfied  with  that  level  of  proteetion 
ean  also  install  eommereially  developed  “eyberguard  dogs”  to  sniff  out 
those  proeesses  it  deems  hostile. 


PROTECT  YOUR  PC’s  PRIVACY. 

\v\vv,'.  bi^broth  er  i  n  s  id  e  .com 


Source:  Center  for  Democracy  and  Technology  home  page,  n.d.,  n.p.;  on-line,  Internet,  available  at 
http://www.cdt.org. 

Figure  11.  Digital  Identification  Backlash 
Loss  of  Sovereignty yPlexibility 

Any  convention  which  restricts  the  use  of  a  type  of  warfare  subordi¬ 
nates  national  preference  to  international  law  and  reduces  a  comman¬ 
der’s  options.  Under  an  IRIS  regime,  a  commander  will  have  restricted  IW 
options  in  a  low  intensity  conflict  or  other  circumstances  short  of  war. 
However,  once  the  threshold  of  armed  force  or  aggression  is  crossed,  the 
full  range  of  IW  capabilities  returns.  While  this  may  appear  overly  strin¬ 
gent,  it  substantially  reflects  the  current  US  policy  on  the  use  of  IW.  Dur- 
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ing  the  Air  Force  Doctrine  Symposium  at  Maxwell  Air  Force  Base,  Al¬ 
abama,  on  1  March  1999,  Brig  Gen  John  R.  Baker,  Air  Force  Air  Intelli¬ 
gence  Agency  commander,  stated  that  the  US  threshold  for  the  use  of  IW 
is  no  less  than  for  traditional  kinetic  weapons.  “  He  stated  that  IW  is 
treated  cautiously  in  light  of  WMD  analogies,  which  doubt  the  ability  to 
limit  the  effects  of  an  information  attack.  As  a  policy  decision,  current 
ROE  reflect  the  ambiguous  nature  of  IW.  Under  an  IRIS  regime,  US  policy 
would  be  limited  by  treaty  instead  of  apprehension. 

The  IRIS  regime  would  be  verifiable,  enabled  by  digital  identification. 
Strong  encryption  would  assure  the  privacy  of  civil  libertarians.  The  abil¬ 
ity  to  verify  the  source  of  attacks  through  computer  forensics  aided  by  dig¬ 
ital  identification  would  decrease  intelligence  needs,  balancing  the  loss  of 
decryption  capability.  Most  importantly,  the  IRIS  model  results  in  the 
strengthening  of  US  information  security  and  a  decreased  risk  of  general 
conflict  due  to  global  prosperity. 
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Chapter  6 


The  Future 


Since  wars  begin  in  the  minds  of  men,  it  is  in  the  minds  of  men  that  the  defenses 
of  peace  must  be  constructed. 

— United  Nations  Educational,  Scientific, 

and  Cultural  Organization,  Constitution,  1945 


The  perception  of  information  as  a  medium  separated  from  land,  sea, 
and  air  renders  it  a  disservice.  Conversely,  simply  treating  it  as  an  elec¬ 
tronic  form  of  communication  is  naive.  Relative  information  power  is  not 
measured  in  physical  terms  such  as  numbers  of  tanks,  ships,  or  jets.  In¬ 
formation  is  different  It  has  characteristics  of  land  (domain),  sea  (com¬ 
merce),  air  (precision  attack),  and  space  (persistence)  power.  Historical 
precedents  dealing  with  these  realms  contain  much  evidence  in  attempt¬ 
ing  to  discover  a  credible  international  accord. 

How  We  Arrived  Here 

To  narrow  the  focus,  the  nature  of  peaceful  relations  between  states  is 
the  focus  of  this  study.  Within  this  a  UN  convention  on  international  law 
regarding  lO  is  a  logical  necessary  first  step.  Saint  Thomas  Aquinas’s  ex¬ 
amination  of  Jus  ad  bellum,  the  right  to  go  to  war,  provides  historical 
depth.  1  As  a  formal  descendent  of  his  work,  the  Charter  of  the  UN  estab¬ 
lishes  guidelines  for  the  legitimate  use  of  armed  force  and  the  peaceful 

resolution  of  disputes.  The 
advent  of  lO,  however, 
blurs  the  line  between 
peaceful  acts  and  hostile 
acts. 

That  information  com¬ 
merce  profits  from  peaceful 
agreement  corresponds  to  a 
maritime  setting.  Mean¬ 
while,  information’s  indis¬ 
tinct  boundaries  parallel 
the  early  days  of  air  and 
space.  The  analogies  be¬ 
tween  sea,  air,  and  space 
provide  insight  into  poten¬ 
tial  international  conven¬ 
tion.  See  figure  12. 


Physical  Destructiveness 

Source:  Institute  for  National  Strategic  Studies. 

Figure  12.  Classification  of  Attacks 
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Maritime  Law 

As  the  first  medium  to  eneounter  sovereignty  dilemmas  not  related  to 
territory,  maritime  law  aets  as  the  basis  for  other  mediums.  To  support 
the  maintenanee  of  land  sovereignty,  states  attempted  to  plaee  a  buffer 
zone  around  their  territorial  interests.  Maritime  law  established  a  three- 
stage  model  for  international  sovereignty: 

1.  Debate  forms  on  a  subjeet  with  eonflieting  opinions. 

2.  Praetiee  of  states  begin  to  form  eustomary  law  (sometimes 
disputed). 

3.  States  agree  to  treaty  or  eonvention.^ 

While  maritime  law  was  older,  it  did  not  firm  up  until  reeently  with  the 
ratifieation  of  the  Law  of  the  Sea.  It  lingered  on,  at  first,  due  to  a  laek  of 
interest.  As  long  as  a  eustomary  three-mile  limit  applied,  nations  were 
happy.  Onee  the  resourees  of  the  sea  beeame  an  issue — ^with  fishing  and 
seabed  mining  rights  at  stake — nations  elamored  to  grab  as  large  a  share 
of  the  sea  as  possible.  Reeognizing  that  the  benefits  of  eooperation  out¬ 
weighed  the  eosts  of  agreement,  the  United  States  signed  the  Law  of  the 
Sea  in  1998. 

Law  of  the  Air 

Before  heavier -than-air  flight,  maritime  analogies  were  used  to  deseribe 
the  air.  Early  Roman  law  opinion  ineluded,  ‘The  air  should  be  open  to  the 
free  use  of  all,  and  that  it  might  be  used  freely  as  might  the  flowing  water, 
the  sea  shores,  and  the  sea.”^  Customary  law  emerged  with  eontrolled 
flight  and  the  eonfliet  of  World  War  1.  Nations  intereepted  and  shot  down 
enemy  aireraft.  Neutral  states  pursued  and  foreed  down  belligerent  air- 
eraft  and  interned  their  erews.  “National  airspaee  eame  to  be  eonsidered 
as  saerosanet  as  sovereignty  itself  and  was  no  less  jealously  guarded.”'^ 
The  Warsaw  Convention  of  1929  and  the  Chieago  Convention  of  1944  en¬ 
dorsed  state  air  sovereignty  and  established  rules  for  safety  of  flight. 

Law  of  Space 

When  spaee  flight  beeame  possible,  some  eommentators  proposed  to  ex¬ 
tend  state  air  boundaries  to  infinity.  Oddly,  no  eonventional  law  sinee  has 
defined  an  explieit  boundary.  Absent  a  definitive  limit  between  air  and 
spaee,  eonventional  law  has  sought  to  limit  spaee  by  purpose  or  intent.  In 
the  1950s  the  United  States  endorsed  a  regime  that  would  not  permit  a 
destabilizing  use  of  spaee.  The  Outer  Spaee  Treaty  of  1967  banned  the  or¬ 
biting  of  WMD,  as  well  as  the  plaeement  of  WMD  or  military  fortifieations 
on  any  eelestial  body.®  As  to  ordinary  weapons,  eonventional  law  has  not 
weighed  in.®  Some  might  argue  the  paeifieation  of  spaee  is  implieit  in  all 
treaties  regarding  spaee,  and  the  laek  of  weapons  in  spaee  has  ereated  a 
eustomary  regime  that  forbids  them.  However,  the  absenee  of  any  effort  to 
plaee  weapons  in  spaee  has  denied  states  the  opportunity  to  oppose  them. 
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Conventional  law  still  awaits  customary  judgment  as  to  whether  outer 
space  is  an  international  free  regime,  akin  to  the  high  seas  and  interna¬ 
tional  airspace,  or  one  restricted  to  benevolent  use. 


Information  as  a  Medium 

American  society  has  increased  its  reliance  on  information  technology. 
Consequently,  the  US  national  security  strategy  and  national  military 
strategy  have  embraced  technology- reliant  infrastructures  as  vital  to  US 
interests.  Differences  between  recent  national  security  strategies  illus¬ 
trate  an  emerging  dependence.  Each  national  security  strategy  delineates 
three  core  objectives,  which  are  to  enhance  US  security,  to  bolster  Amer¬ 
ica’s  economic  prosperity,  and  to  promote  democracy  abroad.^  However, 
the  1998  iVSS  illustrates  the  emerging  importance  of  information.  In  de¬ 
scribing  national  interests,  it  equates  citizens  with  the  critical  infrastruc¬ 
tures  and  infrastructure  disruption  with  WMD.  The  1998  iVSS  provides 
validation  that  information  and  its  relative  importance  have  come  of  age. 

Not  surprisingly,  the  United  States  relies  on  superior  information  tech¬ 
nology  to  convert  information  into  combat  effectiveness.  JV  2010,  the 
CJCS  vision,  plans  to  leverage  information  systems  to  supplant  and,  in 
some  instances,  replace  present  forms  of  human  interaction.  This  greatly 
speeds  up  the  decision  cycle  but  leaves  the  US  military  with  a  dubious 
foundation  of  information  superiority.  Lacking  information  dominance, 
the  anticipated  smaller,  more  lethal  force  may  end  up  being  just  smaller. 

Information  Vulnerability 

The  PCCIP  determined  that  there  are  several  infrastructures  that  are 
critical.  Due  to  reliance  on  information  systems,  the  report  contends  that 
vulnerabilities  exist  to  information  attacks  and  that  the  threat  is  real.® 
The  power  outage  in  San  Francisco,  California,  and  the  Melissa  virus 
demonstrate  the  potential  fragility  of  the  national  infrastructure.  However, 
the  true  vulnerability  of  computers  is  not  so  clear. 

Military-sponsored  think  tanks  warn  of  apocalyptic  events.  Sen.  Fred 
Thompson  (R-Tenn.),  a  member  of  the  Senate  Governmental  Affairs  Com¬ 
mittee,  named  several  historically  adversarial  nations  as  incorporating  fW 
into  their  military  doctrine.  He  warned,  “we  cannot  wait  for  an  electronic 
Pearl  Harbor  or  Oklahoma  City  to  recognize  there  is  a  problem.”®  However, 
skeptics  view  the  h}q)e  as  advertisements  for  a  self-aggrandizing  IW/com- 
puter  security  industry.  George  Smith,  the  editor  of  Crypt  Newsletter,  cites 
FBI  articles  which  included  information  originally  intended  as  a  joke, 
such  as  the  rerouting  of  White  House  phone  calls  to  the  Marcel  Marceau 
University  for  miming,  or  a  nonexistent  virus  called  “Clinton.”^®  If  the 
United  States  is  so  vulnerable,  cynics  argue,  then  why  have  Iraq  or  Osama 
bin  Laden  not  succeeded  in  an  information  attack?  However,  typical  citi- 
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zens  intimidated  by  computers  and  troubled  by  Windows  lockups  may  be 
inclined  to  believe  the  worst. 

The  Law  of  the  Computer 

IW  law  has  not  followed  the  custom  of  other  mediums.  Domestic,  not  in¬ 
ternational,  law  was  the  original  focus  since  the  United  States  held  an 
early  monopoly  on  network  creation.  Due  to  this,  laws  protecting  network 
anonymity  and  privacy  are  strongly  embedded.  Consequently,  bilateral 
agreements  have  emerged  as  a  precursor  to  unified  international  law. 
Some  believe  current  law  adequately  proscribes  hostile  computer  activity. 
However,  the  hope  that  other  nations  will  accede  to  US  opinion  on  the 
matter  is  without  merit.  As  time  will  likely  erode  the  present  US  advan¬ 
tage,  the  time  for  agreement  is  now. 

The  IRIS  Model 

The  proposed  IRIS  model  mirrors  space  sanctuary  by  admitting  unre¬ 
stricted  weapons  development.  Acknowledging  this,  the  model  prohibits 
the  deployment,  not  the  development,  of  computer  attack  weapons.  The 
IRIS  regime  treats  illicit  computer  intrusion  as  a  universally  criminal  act. 
State-sponsored  computer  intrusion  is  defined  as  an  act  of  aggression, 
and  CNA  is  a  use  of  armed  force.  While  space  sanctuary  is  the  borrowed 
model,  the  advantages  resemble  those  of  maritime  law. 

The  advantages  associated  with  implementing  the  IRIS  model  accrue 
due  to  increased  security  in  the  peacetime  information  network  and  a 
change  in  focus  for  nascent  information  warriors.  Elimination  of  CNA,  as 
an  ideal,  protects  the  global  information  infrastructure.  For  the  United 
States,  the  relative  opportunity  lost  is  advantageous  since  it  is  the  nation 
most  dependent  on  information  systems.  The  clear  communication  of 
rules  banning  preemptive  placement  of  viruses  lessens  the  risks  of 
brinkmanship  and  eases  cultural  anxiety  about  misinterpretation.  In¬ 
creased  security  of  information  provides  an  added  boost  to  global  pros¬ 
perity.  Delineating  where  lO  crosses  the  boundary  from  espionage  into  ag¬ 
gression  or  use  of  armed  force  will  simplify  the  ROE  and  reduce  the  time 
necessary  to  complete  the  planning  process.  Implementation  of  the  IRIS 
regime  can  bridge  some  old  gaps  while  focusing  information  age  competi¬ 
tion  in  the  commercial  rather  than  the  military  sector.  However,  the  myr¬ 
iad  of  competing  agendas  necessitates  a  balanced  approach  to  an  IRIS 
regime  implementation. 

Feasibility/Trade-Offs 

The  obstacles  to  overcome  in  reaching  an  IRIS  accord  are  great  and 
would  require  a  succession  of  sacrifices  and  trade-offs.  As  a  first  require¬ 
ment,  the  IRIS  regime  would  have  to  be  verifiable.  To  be  verifiable  digital 
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identification  of  communication  would  be  necessary,  but  verifying  identity 
would  intrude  on  civil  liberties.  Universally  strong  encryption  would  preserve 
privacy,  but  strong  encryption  would  reduce  the  intelligence-gathering  ca¬ 
pability  of  the  United  States.  The  ability  to  verify  the  source  of  digital  in¬ 
formation  would  decrease  intelligence  needs  and  complete  this  cybernetic 
circle  of  life.  Most  importantly,  the  strengthening  of  US  communications 
security  and  the  overall  decreased  risk  of  conflict  due  to  global  prosperity 
would  decrease  the  need  for  intelligence.  See  figure  13. 


Source:  Maj  Karl  J.  Shawhan 


Figure  13.  Trade-Offs 


Civil  Liberties 

Technologies  for  digital  identification  exist  but  are  not  in  widespread 
use  due  to  the  passion  for  privacy  on  the  Internet.  Intel  Corporation’s  re¬ 
cent  debut  of  the  Pentium  III  processor  with  embedded  identification  re¬ 
ceived  a  lot  of  bad  press.  Immediately  panned  for  enabling  “big  brother’s 
oversight,”  Intel  quickly  released  a  utility  that  would  disable  the  feature. 
‘The  controversial  part  of  the  processor  serial  number  is  the  fact  that, 
when  enabled,  your  unique  ID  could  serve  as  a  unique  tracking  identifier 
for  you  and  your  computer  while  on  the  Internet.  Theoretically  the  proces¬ 
sor  serial  number  is  intended  to  only  offer  a  method  of  informing  users  of 
the  rated  clock  speed  of  their  processor  while  also  allowing  for  greater  se¬ 
curity  during  on-line  transactions  since  your  unique  ID  can  only  be  as¬ 
signed  to  a  single  processor,  and  therefore  a  single  computer,  yours.”^^ 
Intel  boasts  that  the  processor  serial  number  will  “enhance  system  and 
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asset  tracking”  by  information  technology  managers.  Security  with  the 
chip  is  not  perfect  since  the  chip  cannot  report  who  is  at  the  computer. 
However,  an  enhanced  network  including  this  innovation  will  go  a  long 
way  towards  improving  cyberforensics  and  oversight.  Civil  libertarians 
should  not  confuse  anonymity  with  privacy.  The  telephone,  with  caller 
identification,  is  not  anonymous.  Privacy  is  the  only  legitimate  commodity 
anonymity  protects  in  a  weak  encryption  construct.  If  civil  libertarians 
could  be  assured  of  privacy  through  encryption,  then  their  opposition  to 
digital  identification  would  be  without  merit.  Strangely  enough,  one  path 
to  strong  encryption  runs  through  a  hardware-encoded  serial  number. 
Kim  Schmitz,  chief  executive  officer  of  Data  Protect  GmbH  confirms,  “A 
cryptographically  secure  implementation  would  use  the  serial  number  as 
the  key  to  a  sufficiently  strong  hard -wired  cr5^to-algorithm.”^^  The  diffi¬ 
culty  lies  in  getting  civil  libertarians  and  intelligence  in  the  same  camp. 

Intelligence  Needs 

Universally  strong  encryption  would  satisfy  privacy  needs  but  leave  the  in¬ 
telligence  business  scrambling.  Anyone  who  has  updated  his  encryption  soft¬ 
ware  to  128-bit  security  through  Microsoft  or  Netscape  has  had  to  validate 
his  residence  in  the  United  States.  This  is  due  to  US  export  controls  on  en¬ 
cryption  technology.  This  allows  supercomputers  used  by  US  intelligence  or¬ 
ganizations  to  decrypt  international  communications.  If  information  is  the 
currency  of  intelligence,  then  decryption  is  a  mint  that  keeps  issuing.  To 
maintain  this  power,  intelligence  agencies  of  the  West  have  colluded  to  pre¬ 
vent  the  use  of  strong  encryption  in  international  communications. 

Last  December,  bureaucrats  from  the  Department  of  Foreign  Affairs  and  Trade, 
advised  by  the  Department  of  Defense,  signed  a  broad-ranging  ban  on  mass- 
market  cryptography,  effectively  globalising  elements  of  United  States  anti- 
cryptography  policy. 

The  Wassenaar  Arrangement,  backed  by  33  governments  around  the  world  In¬ 
cluding  the  US,  Japan,  Canada  and  many  European  countries,  was  condemned 
by  computer  freedom  activists  such  as  Electronic  Frontiers  Australia  and  Its  US 
sister  group,  the  Electronic  Frontiers  Foundation.'^ 

In  the  debate  of  quality  versus  quantity,  the  intelligence  corps  might  be 
convinced  to  trade  encryption  for  digital  identification.  Digital  identifica¬ 
tion  would  simplify  locating  the  origin  of  a  cybercriminal,  which  is 
presently  difficult.  In  the  end  the  intelligence  services  will  be  trading 
something  they  are  about  to  lose  anyhow.  The  international  agreement  to 
limit  encryption  is  unsupportable.  According  to  Professor  Henry  Beker, 
president  of  the  United  Kingdom’s  Institute  of  Mathematics  and  Its  Appli¬ 
cations,  the  agreement  has  little  impact  because  many  signatory  coun¬ 
tries  will  simply  ignore  it.  “You’ll  find  that  countries  like  Germany  that  al¬ 
ways  stick  to  the  letter  of  these  things  may  stick  to  this,  but  a  lot  of  other 
countries,  like  Italy  and  Spain,  will  just  ignore  it  when  they  need  to  and 
electronic  commerce  will  just  continue  on.”^^  An  American  firm,  RSA  Data 
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Security  Incorporated,  has  already  succeeded  in  circumventing  the  export 
controls.  “RSA,  which  last  year  turned  a  $50m  profit,  has  adroitly  side¬ 
stepped  that  ban  by  opening  a  branch  in  Australia,  a  nation  with  more 
flexible  encryption  export  regulations.  The  move  gives  RSA  Data  Security 
Australia  access  to  a  global  market  for  encryption  technology.  In  the  few 
weeks  it  has  been  operating,  Bidzos  claims,  the  new  Brisbane-based  op¬ 
eration  has  ‘already  done  business  worth  millions.’”^®  In  another  blow  to 
encryption  limits,  due  for  appeal,  the  US  Ninth  Circuit  Court  of  Appeals 
on  6  May  1999  “ruled  unconstitutional  the  U.S.  government’s  ban  on  ex¬ 
porting  source  code  for  strong  encryption. Intelligence  services  should 
rejoice  that  within  IRIS  they  are  getting  something  for  relatively  nothing. 

Strong  encryption  will  diminish  the  United  States’s  ability  to  peer  into 
international  communications.  However,  recent  intelligence  deficiencies 
demonstrate  that  decryption  is  no  panacea.  In  spite  of  encryption  limits, 
the  United  States  missed  India’s  preparation  for  a  nuclear  detonation.  De¬ 
cryption  has  not  revealed  how  to  topple  Saddam  Hussein  or  delegitimize 
Slobodan  Milosevic.  The  presence  of  decryption  does  not  deter  human  es¬ 
pionage,  which  was  recently  highlighted  at  nuclear  weapons  laboratories. 
In  retrospect  a  change  in  focus  from  digital  to  human  sources  may  actu¬ 
ally  benefit  the  intelligence  community. 

Internet2 — A  Vehicle  for  Change 

The  entrenched  interests  opposed  to  an  IRIS  regime  could  be  moved  by 
the  impetus  of  a  future  Internet.  Internet2  and  the  Next  Generation  In¬ 
ternet  (NGI)  are  experimental  programs  demonstrating  capabilities  100  to 
1,000  times  faster  than  the  present  Internet.^®  Designed  to  meet  the  large 
bandwidth  needs  of  universities  and  laboratories,  the  programs  are  har¬ 
bingers  to  a  future  universal  Internet.  As  telegraph  users  eagerly  con¬ 
verted  to  the  telephone,  the  new  Internet  will  make  the  old  one  a  nostal¬ 
gic  memory. 

Currently  in  the  planning  stage,  the  security  requirements  for  Internet 
2  and  NGI  could  incorporate  IRIS  architecture.  Mandatory  digital  identifi¬ 
cation  would  add  little  to  the  cost  of  an  Internet2  capable  system  since 
new  hardware  is  already  necessary  to  take  advantage  of  the  extreme 
speeds.  As  with  any  emerging  technology,  the  system  could  be  backward- 
compatible  with  older  computers.  Large  investments  in  infrastructure 
such  as  fiber  optics  are  necessary  to  deliver  these  speeds  to  the  home.  Ini¬ 
tially,  only  Internet  fanatics  or  the  wealthy  will  invest  in  the  upgrades. 
Subsequently,  as  the  new  web  becomes  prevalent,  a  greater  portion  of  the 
total  system  will  be  secure.  A  grace  period  would  permit  a  reasonable 
amount  of  time  before  all  systems  are  converted.  Upon  expiration  of  the 
grace  period,  the  old  Internet  needs  to  be  severed  from  the  new  to  prevent 
corruption.  This  outmoded  system  could  harbor  those  who  value 
anonymity  over  security,  while  the  leftover  intelligence  decryption  branch 
keeps  an  eye  on  them. 
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Reap  What  You  Sow 


The  world  is  in  the  midst  of  an  information  revolution,  with  disparate 
visions  of  the  revolution’s  outeome.  Indeed,  there  are  many  barriers  to  in¬ 
ternational  aeeord  on  lO.  However,  the  journey  is  not  unworthy  just  be- 
eause  the  task  is  onerous.  To  eoin  a  phrase,  the  United  States  ean  lead, 
follow,  or  get  in  the  way.  If  it  ehooses  to  interfere,  the  United  States  ean 
objeet  to  ehanges  in  the  status  quo — seemingly  with  its  head  in  the  sand. 
To  follow,  it  ean  permit  other  nations  to  eontrol  the  issues  that  surround 
the  future  of  digital  eommunieation  and  aequiesee.  As  a  leader,  however, 
the  United  States  ean  ehart  a  bold  future  of  eonfidenee  and  seeurity.  Re¬ 
garding  arms  eontrol,  Reagan  onee  said,  ‘Trust,  but  verify.”  A  future 
within  an  IRIS  regime  eaptures  this  spirit  of  faith.  There  are  no  guaran¬ 
tees  that  other  nations  will  eonsent  to  a  US  position  on  IW.  Consequently, 
requirements  for  an  IRIS  eompliant  system  ean  exist  within  emerging 
teehnology  protoeols.  The  NGI  or  Internet2  provide  the  vehiele  for  ehange. 

The  United  States  stands  as  the  most  sueeessful  demoeratie  republie. 
Allowing  strong  eneryption  will  tell  the  world  that  what  is  good  enough  for 
US  eitizens  is  good  enough  for  all.  It  would  end  the  irony  of  a  nation  that 
eherishes  liberty  while  keeping  tabs  on  international  eommunieation.  The 
IRIS  regime  would  demonstrate  that  after  the  eold  war,  the  United  States 
ean  foeus  on  winning  the  next  war  and  still  lead  the  eharge  for  demoeraey. 
Indeed,  from  the  1997  NMS:  “Engagement  aetivlties,  ineluding  informa¬ 
tion  sharing  and  eontaets  between  our  military  and  the  armed  forees  of 
other  nations,  promote  trust  and  eonfidenee  and  eneourage  measures 
that  inerease  our  seeurity  and  that  of  our  allies,  partners,  and  friends.  By 
inereasing  understanding  and  redueing  uneertainty,  engagement  builds 
eonstruetive  seeurity  relationships,  helps  to  promote  the  development  of 
demoeratie  institutions,  and  helps  keep  some  eountries  from  beeoming 
adversaries  tomorrow.”^®  An  IRIS  regime  would  fortify  the  primary  na¬ 
tional  seeurity  strategy  objeetives  to  enhance  US  security,  bolster  Amer¬ 
ica’s  economic  prosperity,  and  promote  democracy  abroad.  For  the  United 
States,  the  IRIS  regime’s  embedded  virtues  of  liberty  are  a  superior  vehi¬ 
ele  for  a  strategy  of  engagement. 
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